Fusion5 Security Centre: Safe hands make light work

Managed Security Services: Capabilities FAQ

• Security Operations Centre 

  As part of Fusion5’s ISO 27001 certified Managed Services division, the Security Operations Centre has been working behind the scenes keeping these services secure. In 2021, the Security Operations Centre was introduced to the market as the Fusion5 Security Centre and made available a range of services including a Managed Detection and Response service.  

• Incident Response Management and Support 

  A critical part of Fusion5’s Managed Services and an ongoing requirement to maintain certification is the ability to manage adverse situations or incidents as they arise. Fusion5’s Incident Response Plan undergoes periodic assessment to ensure that it exceeds Customer expectations. Fusion5 utilises a range of tools and processes for incident coordination and to ensure that the right resources can be immediately brought into the incident response.

• Threat Management and Hunting 

  Fusion5’s Security Centre performs both proactive and reactive threat-hunting. Proactive threat-hunting is performed with the goal to identify risk and improve resilience; and reactive threat-hunting is performed post incident or suspected breach – at the Customer’s request.

• Security Infrastructure Management 

  Fusion5 can find the right mix of Security Infrastructure Management to meet most customer needs, utilising Fusion5’s tailored Azure, AWS, and OCI infrastructure management.  

  Patch and backup management are typical Managed Services inclusions and are heavily controlled through our compliance and assurance program. Patch management helps to ensure vulnerabilities are promptly remediated on a schedule that suits our customers. Backups are performed at a cadence required to meet Recovery Point Objective (RPO) requirements.  

• Security Engineering

  Fusion5 specialises in Azure landing zone deployments and as an Advanced Specialisation Microsoft Partner has extensive experience with helping customers along with their cloud adoption journey, whether it’s greenfield or a mature environment. Fusion5 also assists our customers with continual and ad-hoc security maturity assessments and infrastructure hardening.  

• Compliance Monitoring and Reporting 

  Fusion5 can either ensure continued compliance in, or assist customers become self-sufficient with:  

  • Defender for Endpoint compliance policies  
  • Azure Secure Score  
  • Azure Security Benchmark  
  • Microsoft Secure Score  
  • Microsoft Compliance Manager  

• Vulnerability Management

  Fusion5 has experience providing Vulnerability Management in the following modes:  

  • End-to-end detection through to remediation, utilising Qualys through Defender for Cloud.  
  • Detection only, providing a vulnerability report to customer infrastructure team.  
  • Remediation only, receiving a vulnerability report from customer security team and hardening infrastructure in response.  

  Fusion5 Managed Services hosted environments are covered with end-to-end vulnerability management. Customer environments are tailored to customer requirements.  

• Mobile and Endpoint Security 

  Fusion5 has ample experience in implementing ACSC top 4 and essential 8 controls as well as CertNZ recommendations using a variety of technologies and methodologies including Zero Trust models, SaaS based endpoint management and BYOD. Our approach can be device agnostic and incorporate IoT and IIOT devices as well. Here are some of the most effective controls we recommend for both Windows and non-windows devices:  

  • Continuous discovery  
  • Automated OS patch management  
  • Application patch management  
  • Application Control (Whitelisting)  
  • Privileges management  
  • Device control  
  • Zero password  
  • Multi-Factor authentication  
  • Risk based vulnerability management  
  • Zero touch provisioning   

• Security Aggregation (across Multi-Cloud, Multi-Vendor Environment) 

  To bring Azure security to hybrid and multi-cloud environments, Fusion5 deploys Azure Arc. Defender for Cloud is then used to aggregate security alerts and improvements across these environments. Microsoft Sentinel provides a single pane of glass view into these environments and ensures a rapid response.  

  For customers wishing to take a different route, avoid certain platforms, or not consume Fusion5’s Managed Detection and Response service, Fusion5 has other options available. These customers tend to require a robust automation or integration capability, for which Fusion5 recommends its solution Campfire. Campfire is a complete 'Integration as a Service' solution that connects business data, applications, services, and processes - no matter where they reside or are hosted, and then monitors them 24/7, with proactive issue resolution to ensure continuous up-time.  

• Security Process Automation 

  Fusion5’s Security Centre makes use of Security Process Automation to ensure that frequently performed activities can proceed with minimal intervention. This empowers Security Analysts to focus on novel and higher priority alerts, providing greater value and a reduction of risk for our customers. Also included in the service is custom use-case development that allows customers to automate security processes specific to their business.