ideaBOX's Comprehensive Cyber Security Service is a managed security service offering for businesses seeking to reduce cyber risk and meet regulatory compliance requirements. The service follows a structured onboarding roadmap: - Days 1–30: Network discovery via agentless collector, MDR deployment to workstations and file servers, 24/7 SOC activation, threat/response matrix development, and initial policy review. - Days 31–60: Network site diagram publication, dark web search, Active Directory review, and first draft of a NIST-aligned cybersecurity policy. - Days 61–90: Penetration testing, backup/disaster recovery analysis, managed DNS deployment, and policy refinement. - Ongoing: Continuous monitoring, reporting, phishing simulations, and SETA program delivery. Core service components include: - Written Information Security Program (WISP) documentation - Vulnerability scanning and penetration testing - Simulated phishing campaigns and employee security awareness training (SETA) - Cyber breach incident response, crisis communication, and recovery (one breach event per year at no additional cost) - Fractional/virtual CISO advisory services - 24/7 Security Operations Center (SOC) monitoring - Data security with encryption (powered by Actifile) - Dark web monitoring - Return on Mitigation (ROM) reporting Service activities are delivered on monthly, quarterly, semi-annual, annual, and one-time schedules depending on the activity.