Author Archives: Thrive

A cyber attack can take mere minutes, or even seconds, to compromise endpoints. In the face of these growing threats, current signature-based antivirus and anti-malware products can struggle to keep up.

Cyber security teams can no longer rely on first-generation endpoint detection and response (EDR) tools to respond to the fast pace of today’s threats. Aging EDR tools can also be difficult to maintain and drive up security operations costs. What is the answer? Every organization should have a signatureless endpoint security solution that protects servers and workstations from advanced threats.

Thrive’s Managed Endpoint Security and Response, powered by Fortinet’s FortiEDR platform, offers real-time, proactive security across all devices covering legacy and current operating systems. With the right EDR tool in place, organizations have the ability to prevent the theft of data and intrusion of ransomware, automating response and remediation procedures to give security teams a more effective, time-saving solution.

EDR: The Better Solution

Traditional antivirus tools may provide an alert during an attack, but it is often too late for security teams to react and prevent data theft or an intrusion. EDR tools such as FortiEDR use threat intelligence to monitor suspicious behavior, taking a proactive approach to cyber security.

An antivirus alert may help to an extent, but EDR tools such as FortiEDR provide the “why”, analyzing issues so a security team discovers the root cause of an attack. This allows security teams to track unwanted behavior from the initial incident all the way through remediation. FortiEDR also provides automated attack surface policy control that discovers rogue devices and reduces the attack surface through risk-based proactive policies.

FortiEDR’s next-generation antivirus (NGAV) uses machine learning capabilities to protect critical data and prevent breaches, ensuring business continuity even if a device is compromised. With threat protection both pre- and post-infection in real time, organizations have the capability to shut down entry points commonly used by hackers to compromise critical systems.

Thrive’s Endpoint Detection and Response Provides Peace of Mind

Thrive’s Managed Endpoint Detection and Response service offers proactive, real-time automated security with incident response across all devices covering current and legacy operating systems. If a suspicious event is detected, alerting is provided to Thrive’s Security Operations Center 24X7, so immediate remediation steps can be taken.

FortiEDR provides security analysts with detailed malware information pre- and post-infection, so analysts can take the required steps to secure the endpoints with minimal disruption to end users. The playbook-based system allows security teams to put in place a consistent incident response, using security resources only as needed. Instead of the entire team responding to potentially false alarms, automated, real-time incident response allows your entire security team to focus on isolating devices, terminating malicious processes, and deleting malicious files.

Thrive’s Managed Endpoint Security and Response services allow for business continuity if a hack or security event occurs. Keeping systems online and saving time and money, this service protects endpoints and critical data.

To learn more about Thrive’s EDR solutions, get in touch with our team today!

Thrive is delighted to now be Cyber Essentials Plus certified as part of the Government’s business cybersecurity initiative.

The certification process is a welcome opportunity for us to validate our approach to securing our own business information and that of our clients.

Whilst no security strategy can stop 100% of attacks, the aim is to mitigate the risk as much as possible from common threats and CE Plus certification demonstrates our commitment to doing just that. The time we take to ensure we are certified should also reassure our clients that we take cybersecurity seriously and provide confidence to our staff that they are working in a safe, secure, and compliant environment.

Tuesday, 3rd August 2021, Luton. Thrive is pleased to announce that they have achieved MS Gold Competency in both Communications and Project & Portfolio Management.

With the competency recognition in Communications, Thrive has shown its ability to design, deploy and manage Unified Communications and Collaboration solutions based on MS Teams.

With the additional competency in Project & Portfolio Management, Thrive has demonstrated its ability to design, build and deploy enterprise-wide project management solutions based on Microsoft project solutions.

“This is a great accomplishment that we are pleased to have achieved. It enables us to offer a wider set of skills and services to our customers moving forward.” Commented Phil Cotterill, Sales Director, Thrive European Division.

With a rich heritage in providing unified communications and collaboration solutions, this accreditation enables Thrive to extend the solutions it delivers and manages to its customers across the full capabilities of MS Teams.

In a similar manner, Thrive is well versed in helping customers to manage complex projects and change programmes. This competency in Project & Portfolio Management enables the team to assist customers to leverage the full power of the Microsoft toolset.

“At Thrive we continually invest in skilling our people to ensure we provide a comprehensive range of services and solutions that align to the needs of our customers. These accreditations continue to demonstrate Thrive’s high degree of competence in the collaboration and project management space that has enabled us to deliver significant value to our customers over the past three decades,” said Cotterill.

Additional contributions to this blog were made by Brad Chase, Senior Director of Sales, SkySync

Following a late-2020 rebranding, Google recently announced price increases for its Workspace product. For many businesses, reducing costs was an important reason to consider products like Google Workspace (formerly GSuite) in the first place.

Now, with price increases taking effect, organizations may have a decision to make about Cloud storage providers. As prices change and limits on storage evolve, it’s easy to understand why businesses may be rethinking their options. While Google Workspace and Office 365 represent the two largest Cloud storage providers on the market, businesses may utilize several other providers such as Box or Dropbox, too.

Does it make sense to continue to utilize all of these services? Is migration the right path forward? The recent Google Workspace price increase may be driving migration thoughts for businesses, as they look to avoid potentially costly contract renewals.

Migrating to a Cloud Storage Platform

The COVID-19 pandemic shone a spotlight on the need for organizations to have collaboration and productivity tools at the ready, to support those in the office and those working remotely. Every business will have a choice to make when it comes to selecting a SaaS solution capable of driving seamless collaboration.

With costs rising, migrating to a more cost-effective Cloud storage solution is front of mind for many organizations. For some, this means eliminating redundancies and moving everything to a platform that may already be an option within the organization. Microsoft Office or Google products that go beyond file storage and sharing may already be in use, which provides the option to upgrade to Office 365 or Workspace more easily.

Comfort can end up playing the biggest role in the decision-making process. If installable apps are the biggest driver, Office 365 may be the best fit. Google Workspace, meanwhile, brings everything online with its browser-based approach.

Evolving workforces are accelerating enterprise organizations’ move to the Cloud, particularly the world of Cloud SaaS. Workspace, Office 365, and other Cloud offerings offer shared team storage and Cloud storage for remote workers to use more easily.

Finding the Right Cloud Storage Fit for Your Organization

In this day and age, every organization deserves a SaaS offering that delivers collaboration, business productivity, and streamlined communication. Since the turn of the century, Microsoft became well-known for providing organizations with on-premises technology stack solutions.

However, with the emergence of Cloud-hosted SaaS technology, vendors like Box, Dropbox, and Google capitalized. Business users no longer required IT-sanctioned solutions; they could embrace the most intuitive platform that helped them do their job. The multi-Cloud ecosystem took off.

With Office 365 subscriptions serving a core growth vertical for Microsoft, this loss in market share served as a wake-up call. Culturally, they shifted towards a customer-focused model that prioritized technology adoption and business stakeholder engagement beyond the IT department. Technologically, Microsoft prioritized OneDrive for Business enhancements and launched the innovative, unified collaboration product known as Microsoft Teams.

Microsoft Office 365 carries a familiarity factor, as its suite of apps has been a favorite of on-premises offices for years. For enterprise organizations that have grown out of the need for Box and Dropbox, Office 365 is the Cloud SaaS solution that closely matches what everyone is used to from its on-premises capabilities.

Whether utilizing Office 365, Google Workspace, or another Cloud storage system, Thrive can assist with handling your storage solutions. Now is a great time to take a closer look at your data landscape, to see where redundancies can be found in an effort to avoid Cloud storage price increases. Not sure where to start? Get in touch with the Thrive team today.

In a recent blog, we took a closer look at some of the IT acronyms that we believe are the most important. But, why stop with just seven?

In part two, we’re sharing a few more information technology acronyms that should be well-known, describe them, and explain how they impact your organization.

EPP: Endpoint Protection Platform

Focusing on prevention, an Endpoint Protection Platform is capable of providing security and blocking malware on end user devices (or endpoints), such as mobile devices, laptops, and related workstations. An Endpoint Protection Platform is a traditional anti-virus solution, and while it may solve some of the issues on the front lines, it should be paired up with Endpoint Detection and Response (EDR). While an EPP can prevent traditional malware, ransomware, and zero-day vulnerabilities from reaching devices, Thrive’s Managed Endpoint Security and Response offers real-time response and a more reliable security solution for organizations.

MDM: Mobile Device Management

As enterprises experience an increase in end users utilizing mobile devices to handle certain tasks, it is important to have a Mobile Device Management solution in place. If devices are left unsecured, it may expose corporate data and other vital information. As the workforce evolves, an integrated Mobile Device Management solution ensures compliance for devices and workstations. Thrive offers a targeted solution that provides comprehensive control over mobile devices within an organization on one platform.

SSO: Single Sign-On

Single sign-on software allows users to access more than one database or application with one standardized set of credentials. SSO software is meant to provide simplified access to applications or programs without having to log in multiple times. Not only do SSO products improve ease of use for users, but IT administrators and developers will also enjoy centralized access management. Thrive ensures single sign-on software is properly implemented, with secure access to applications and data for users.

MFA/2FA: Multi-Factor/2-Factor Authentication

Multi-factor and 2-factor authentication, often used interchangeably, requires a user to provide multiple forms of verification to access an application or resource. 2FA is a subset of MFA, but maxes the number of factors at two, while MFA can be two or more. While an application or website requiring a password may seem safe, passwords are often far too easy to guess. Multi- or two-factor authentication may require a user to enter a pin from their phone, or provide a fingerprint verification to gain access to the application. One-time passwords (OTPs) are often used, too, which may be sent via email, text, or through a mobile app. If your organization requires users to access a corporate VPN or cloud-based application, MFA/2FA should be a part of your business strategy.

RPO: Recovery Point Objective

RTO: Recovery Time Objective

Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are critical parts of any organization’s business continuity and disaster recovery plans. RPO defines the goal related to the maximum amount of data (measured by change over time) that may be lost just prior to the disaster. RTO defines the approximate or maximum time until the data and/or systems can be accessible again in order to continue business operations. RPO and RTO are parts of a business continuity plan, which is designed to help organizations understand where data is stored and who has access to it.

For more information about Thrive’s NextGen managed services, be sure to contact our experienced team today!

The 2021 RSA Conference certainly looked a bit different this year, as top cybersecurity professionals gathered virtually for keynotes, interactive programs, seminars, and tutorials.

Now that we have had the time to digest the information from sessions on privacy, machine learning and AI, analytics, risk management, and governance, we thought it would be important to share some of the key takeaways from this year’s conference, how Thrive is working to implement new strategies, and what it all means for your organization moving forward.

Asset Management is Growing

IT asset management is essentially the process of ensuring that all business assets are properly accounted for, maintained, upgraded, and replaced in a timely fashion. IT assets may include hardware, software systems, and mobile assets. With the increase in Cloud usage in recent years, that also plays a role in asset management.

Within a single organization, there may be desktop computers, monitors, laptops, all different kinds of software, and even items like printers, scanners, and copiers. IT asset management is becoming more and more necessary, as companies must keep up with what needs to be protected. The proliferation of Cloud services and increase in work-from-home setups post-COVID only makes this more challenging.

Thrive offers asset management solutions that reduce costs, improve compliance, and provide increased control over IT assets.

Security Awareness Becomes Security Appreciation

Sentiment is growing that some security awareness training platforms aren’t executing on the value that was hoped for. The general consensus is that end users will need to appreciate the need for security, instead of simply being aware of it. So, how can an organization ensure that end users are up to date with the latest security trends?

Many security awareness solutions are going back to the drawing board to make training more personal and engaging. When employees care about the security of company data, the overall security posture within an organization increases greatly.

Social engineering, phishing attacks, and credential theft will impact businesses for years to come. Thrive’s Cyber Security Bundle offers training through simulated phishing attacks, along with interactive videos that engage the end user and help them gain a better understanding about security posture.

AI and Machine Learning as an Attack Vector

Preventing ransomware is top of mind for chief information security officers. As security teams leverage off-the-shelf AI and machine learning tools, many security experts believe attackers will fight fire with fire, and we may see AI systems compete against one another. Data poisoning attacks against the machine learning technology used in security software could put many organizations at risk.

AI and ML rely on data and algorithms produced over time, and it’s what makes this technology so useful in preventing ransomware attacks. However, if threat actors can gain access to software, they can manipulate the AI and ML in ways that make it difficult to detect and react to.

Thrive partners with IT teams to implement Cloud-based Disaster Recovery as a Service (DRaaS) solutions, with 24x7x365 monitoring that protects critical systems and data.

Ransomware Everywhere

In the next 24 months, it’s expected that smaller-scale ransomware attacks on IoT and mobile devices will increase. Imagine a phone is taken over, but for a small ransom, it can be unlocked. If attackers can find a backdoor into devices and demand smaller ransoms, these hackers can be successful. It is unfortunate, but with the success of ransomware in the enterprise, it’s likely to trickle down to consumers.

Of course, with many end users working from home, this can lead to interruptions to work, particularly if a smartphone or tablet becomes unavailable. Thrive tailors cybersecurity plans for organizations, and includes protection for employees who may be utilizing BYOD (bring your own device) as an option. Thrive is prepared to tackle the cybersecurity issues of the present and future. For more information about our NextGen Technology services, contact us today!

Related News: Thrive Wins Coveted Global InfoSec Awards

Today, private equity firms are looking at unique challenges. In a highly competitive market, with the need to deploy capital quickly, private equity firms work in uncertain market conditions and must deal with the pressure of increased competition and investor expectations.

The success of an investment depends on the ability to move fast, be strategic with growth, and efficient with operations and integration. Thrive assists PE firms at different points of the life cycle, from pre-close IT diligence to ongoing portfolio enablement to exit preparedness.

We are often engaged by private equity and private equity-backed companies to address technology challenges and mitigate risk, so time and energy can be spent on growing businesses and creating shareholder value.

The Unique Nature of the Alternative Investment Community

What makes private equity companies unique is the wide array of industries they invest in. A private equity firm may own a company that must meet certain government or military requirements, or perhaps a company in the medical field that must meet HIPAA compliance objectives.

For many private equity funds, there is an appetite for protecting their LP’s investments in the portfolio companies they acquire. Operational IT diligence should be done on acquired companies, as these are often owner-operated businesses purchased to become part of much larger enterprises. If there are security concerns within a newly acquired portfolio company or platform investment, it’s important to implement a new standard for these businesses and fortify them before capital is deployed and growth is accelerated through the acquisition of other companies.

PE and investment firms are often a target for hackers. If a PE fund or portfolio company is infiltrated, sensitive financial information may be at risk. Thrive specializes in protecting enterprise value while securing the internet infrastructure, applications, and Cloud platforms that power your business.

Providing Experienced PE Consulting Services

Through each stage of the investment lifecycle, we enable PE partners to focus on growth and the future.

Through Pre-Close IT Diligence, Thrive works with PE customers to understand the potential risk areas within the technology stack, explaining compliance requirements and steps that must be taken to secure the stack. For add-on investments, we will review the IT infrastructure of a target company to ensure smooth integration.

Once a business has been acquired, we go in-depth to create a technology roadmap that discusses risk mitigation, infrastructure, and the creation of secure IT operations, all through the Post-Close IT Operations Baseline & Roadmap.

A complete review of cyber security tools, processes, and staffing will be completed during the Cyber Security and Risk Planning stage, with the creation or validation of security compliance policies and procedures.

In the Integration Services & Carve Outs stage, we align with portfolio company leadership, PE sponsor deal teams, and operations support groups to execute any recommendations and carry out integration efforts.

Ongoing Portfolio Management provides guidance to portfolio companies through our service offerings such as vCIO or vCISO, helping to deliver digital transformation. When a portfolio company is marketed, we will provide Exit Preparedness services to position a company for growth.

Thrive understands the challenges private equity firms face on a daily basis. To learn more about our PE-focused services, get in touch with the Thrive team today!

There are around 2,500 museums in the UK and inside each of them are incredible artifacts that define our heritage and gives us insight into how the world we live in today has evolved. The National History Museum alone has some 80 million artifacts, most of which are not on display at any moment in time.

Thrive is extremely excited and honoured to be part of an initiative aiming to leverage the ‘digital world’ to make our heritage accessible to more people. This initiative is focused on ‘Preservation to Presentation’ and, in straightforward terms, is looking to ‘digitally capture’ those artifacts in our museums. Both Augmented Reality and Digital Presentation Tools have, provided schools, higher education, historians, scientists, and the general public with access to these artifacts

The programme is being supported by The Natural History Museum, Imperial War Museum, Science Museum, British Film Institute, and many creative and technology leaders.

Imagine the scenario, a classroom of children is studying dinosaurs, and a trip to the Natural History Museum might be out of the question. However, by clicking on a QR code in the classroom, the children will have the ability to analyse a Tyrannosaurus Rex using Augmented Reality. This tool would be both a powerful, immersive, and transformational learning experience for the children.

Thrive is working alongside Cisco to support this initiative. The role we are playing is providing the private cloud based platform on which this digital content can be accessed. Our highly resilient and secure private cloud environment, built on leading Cisco technology, is hosting both the presentation technology and the data providing the performance and scalability required for such a service. Equally important is the connectivity side; as the initiative looks to run pop-up museums across the country, it needs a service that can cope with significant peaks in bandwidth. A requirement that Thrive can meet through the unique design of our private cloud offerings.

At Thrive, we work with a broad range of organisations, helping them on their digital transformation and their journey to the cloud. This initiative is an invaluable opportunity for us to apply our skills and experience to a fantastic project with far-reaching benefits to the whole country.

If you want to learn more about Thrive’s data centre facilities, the co-location, private cloud, and hybrid cloud services we provide, please look at the Thrive Cloud Services webpage or get in touch with us here.

Thrive recently held its vCISO webinar, hosted by CRO John Holland, who was joined by Andrew Archibald, vCISO, and Dave Sampson, VP of Consulting. In this webinar, Andrew and Dave discussed the role of a vCISO, the importance of implementing a security program, and why organizations must continue to nurture a security program.

Check out the highlights from the webinar below, and get in touch with the Thrive team to learn more about our vCISO offerings.

Dave Sampson, VP of Consulting

On the latest cyber attacks in the news:

When we look at a lot of the attacks this year, we’ve identified some common trends. As we’ve watched the news, it’s clear many of the organizations attacked have no formal security program. There needs to be a formal security program, and that has to start at the executive suite, starting from the top and working its way down. Having a comprehensive security framework behind security strategy is critical, too. Buying a specific tool may require some areas in the framework, like email hygiene, multi-factor authentication, and disaster recovery. When we see news stories and hear of the unpredictability of recovery time, that means the recovery plan probably hasn’t been validated and tested on a consistent basis. Third-party vendor risk has been in the news, too. When you’re providing data to third-party vendors, who is accessing it? If it’s stolen, it’s just as impactful to you as it is to them.

Why a vCISO is the right fit for an organization:

A vCISO coming in on a part-time basis provides the knowledge and the ability to collaborate. Not all organizations need a full-time CISO, and there’s a shortage of full-time CISOs on the market. A vCISO can provide a better cost model and work with executives throughout the organization, and be results-focused. You’re also getting the experience of several individuals. The Thrive consulting team is certified and able to socialize requirements and find the best solutions. We work in different verticals and have the experience to enhance your security posture.

What a vCISO looks like:

This individual will help spearhead a proactive, security-first approach. We have a policy resource library that a vCISO will help modify to meet your needs. A vCISO can also help plan sustainable business operations, and ensure recovery plans are being validated on an annual or semi-annual basis to create a strong cyber security posture.

Andrew Archibald, vCISO

On how Thrive’s vCISO foundation is built:

The Thrive vCISO offering is built on two foundational concepts. The first is the Center for Internet Security (CIS) framework. Thrive has worked with CIS for many years. It’s an easy to understand and approachable framework, yet extremely comprehensive. CIS has added controls around cloud security and remote work in response to the pandemic, as well. It maps to all of the other frameworks, including NIST and ISO. The second component of the vCISO service is built around the ISACA Certified Information Security Manager (CISM) credential and the domains for them. We make sure that there is a robust security culture throughout the organization, as information security is not just a box that is checked. Ultimately, this risk-based information security program is customized to your organization, taking corporate and IT strategy into consideration. We also make sure that recovery measures are in place to respond to, mitigate, and recover from a security incident.

What you get from the vCISO program:

If you don’t have an information security program, we will help develop and maintain a program that complements business strategy and risk tolerance. Some organizations are more willing to accept risk, and others are risk averse, and we take that into perspective when developing a plan. Our offering is based on creating reasonable information security measures to protect corporate assets. This approach is also eminently flexible. Every company has unique security challenges and concerns, and we remain flexible to address challenges and concerns organizations are facing.

On the vCISO process:

We have a 5-step process to implementing and maintaining the vCISO program, starting with Discovery. In this phase, we’re trying to better understand the existing information security program, or designing one if there is nothing currently in place. We look forward to talking with the board of directors and senior leadership, along with the IT experts to get a grasp of technologies and how they are implemented. We want to make sure the appropriate protections are in place in the Risk Assessment phase, and address any glaring deficiencies immediately.

The Current State Analysis includes a 20-40 page report with recommendations to implement ranked by importance, with remediation items managed and tracked appropriately. In the Information Security Program Development phase, we work to develop a security-focused culture, and create an umbrella document, the Comprehensive Written Information Security Program (WISP), that lays out security strategy, and can be shared with auditors if needed. Of course, day-to-day operations and nurturing will continue, providing updates to management as needed and conducting annual policy and procedure reviews, while making sure the risk profile hasn’t drastically changed.

Missed the Thrive vCISO webinar and want to learn more? Click here to gain on-demand access!

As has become evident in the past few years (particularly in the last year), remote work is no longer just a possibility, but a reality. Organizations have seen the value of completing work from anywhere, but many have used patchwork solutions and short-term fixes to help establish a remote workforce.

Azure Virtual Desktop provides business leaders with a scalable, long-term solution, something many organizations are looking for. The right tools are required for collaboration and innovation, but important information and data must be protected in the process. Azure Virtual Desktop enables a secure remote desktop experience from any device at any time, providing end users with the access they need to get the job done.

Running Azure Virtual Desktop on the Cloud

Running Azure Virtual Desktop on the Microsoft Azure Cloud platform allows users to set up a multi-session Windows 10 deployment that provides a scalable Windows 10 instance accessible from anywhere. An end user gains access to Azure Virtual Desktop via a company-issued device, a shared computer, or their own device. For on-the-go employees, the benefits are clear – no matter where someone is, they’re always connected to a full desktop experience with the proper functionality and customization they’re accustomed to.

Organizations will realize cost savings immediately. Hosting on Azure requires less infrastructure than a traditional setup, and there’s no need for costly servers and the space required to house them. Plus, with employees working from anywhere, office spaces can be consolidated, giving users the option to log on either from home or perhaps a co-working space. Should IT departments choose to forego the process of searching for and maintaining hardware, bring-your-own-device (BYOD) is an option. Allowing employees to use their own device reduces costs and ensures a certain level of comfort.

In a BYOD setup, a company can continue to grow without having to focus on costly IT infrastructure or a lengthy procurement process. Since an Azure Virtual Desktop is always up to date, it has the latest security features capable of detecting threats and taking action, and for IT departments, is an alternative to purchasing expensive new equipment or backup and disaster recovery services.

Azure Virtual Desktop Benefits and Considerations

Azure Virtual Desktop deploys and scales in a matter of minutes, with the ability to use existing licenses so you only pay for what you use. For example, if you’re already signed up for Microsoft Office 365 or an enterprise Windows version, a virtual desktop instance can be set up for each user at no extra cost. Remote users gain access to a virtual desktop interface from anywhere, regardless of device type:

• Windows
• Mac
• iOS
• Android
• Any device with an HTML5 web client

IT administrators can increase the number of virtual CPUs, virtual RAM, and create more virtual hard disk storage with just a few clicks. Azure Virtual Desktop can also be the first step towards bringing legacy applications to the Cloud, for those yet to implement a software-as-a-service (SaaS) solution. This allows for the hybridization of the work environment; if an end user requires a full desktop, Azure Virtual Desktop is the solution, but if they only require access to O365, they can work locally.

As the platform is rolled out to employees, organizations must consider the needs of the end user. While an IT department and a group of tech-savvy professionals may enjoy having access to a virtual interface, some members of a team may require further training and coaching on how to use the technology and how to ask for additional resources if they’re required. Our Thrive team provides detailed training prior to deployment.

Azure Virtual Desktop is a great opportunity for organizations to maximize the benefits of the Cloud. Plus, Azure Virtual Desktop is just one more way to provide employees with remote desktop access and the ability to accomplish tasks even if they’re nowhere near the office. To help your organization deploy Virtual Desktop on Microsoft Azure, get in touch with us today.