Firewalls decay: rules pile up, exceptions are never removed and nobody owns the review. The service brings change control and regular rule reviews to the network.
Every change is requested, risk-checked and recorded, and rule sets are reviewed on a schedule so you can show auditors what is allowed and why.
Why it matters
Change control with approval records
Scheduled rule-base reviews
Patch and firmware management
Health and availability monitoring
Segmentation reviews
Who delivers each serviceSome managed services are delivered by a vetted delivery partner rather than by CISO Consulting's own team. Each service states who delivers it, and the proposal confirms the delivering party and the contract before you commit. Explore managed security
How the engagement runs
- 1BaselineDevices, rules and traffic flows
- 2HardenClean rules and close risky exceptions
- 3OperateChange control, patching and monitoring
- 4ReviewRule reviews on a fixed cycle
What you receive
- Rule-base review reports
- Change log
- Monthly availability and incident report
- Network segmentation map
Packages
| Essential | AdvancedRecommended | Enterprise | |
|---|---|---|---|
| Scope | Core environment | Core and secondary environments | All environments and entities |
| Support hours | Business hours | Extended hours | Round the clock |
| Change handling | Standard changes | Standard and urgent changes | Standard, urgent and emergency changes |
| High-severity response | Four hours | Two hours | Thirty minutes |
| Reviews | Twice a year | Quarterly | Monthly |
| Reporting | Quarterly | Monthly | Monthly with executive summary |
The exact scope and targets are confirmed in your proposal.
Questions
Do you manage our existing devices?
Yes, for supported vendors. We confirm the list during scoping.
Who delivers this service?
It is typically delivered by a partner who is authorized for the vendor, with CISO Consulting advising. The proposal states the exact arrangement.