Wireless Security Monitoring (WSM)
Specialist services to protect your business
Wireless Security Monitoring (WSM)
WiFi, Bluetooth, NFC/RFID, and IoT devices are increasingly used in industrial, corporate, and home environments. However, these devices can use insecure protocols and provide attackers with an attack surface and an entry point to internal data and networks.
The Wireless Security Monitoring service offered by ISGroup allows you to know and continuously monitor the devices communicating via radio frequency within or around your company to assess the risks you are facing and identify even advanced attacks.
In the initial setup and activation phase of the managed monitoring service, our team of experts will conduct a Wireless Security Assessment to analyze the current state and report issues that need immediate resolution.
Subsequently, the selected technologies and frequencies will be constantly monitored through hardware and software devices installed in the areas to be protected, and security alerts will allow you to notice anomalies and intervene promptly.
Description
The service is dedicated to companies that use wireless devices to allow their employees, collaborators, and customers to access corporate resources.
It is particularly suitable for companies and industries that communicate on radio frequencies to deliver critical processes, such as IoT infrastructures, Operational Technology, production lines, remote sensors, or access control.
Following an initial assessment, ISGroup will indicate the changes needed to secure the infrastructure, providing support for the implementation and configuration of devices and technologies.
Then, for the duration of the service, selected communications on WiFi, Bluetooth, GPS, NFC/RFID, Packet Radio, GSM, GPRS/EDGE (2G), UMTS/WCDMA/HSPA+/DC-HSPA+ (3G), LTE(TD-LTE/FDD/) (4G), 5GTF/5G-SIG (5G) or different, proprietary, or even unknown radio protocols will be monitored to identify, prevent, and respond to telecommunications security attacks.
Specifications
The service is fully managed by ISGroup as a Managed Security Service Provider (MSSP) and includes all hardware, software, installation and integration, monitoring, and reporting costs in its fee.
It consists of four main phases
Initial Analysis
In the first year of service or in case of radical changes, a Wireless Security Assessment is carried out. In subsequent years, the activity is a GAP Analysis compared to the set objectives.
Installation and Integration
All necessary HW/SW elements for service delivery are prepared and appropriately configured in compliance with the existing infrastructure.
Monitoring
Anomalies are reported to the internal team with the possibility of TIER-3 escalation to the ISGroup team. If requested by the Client, all anomalies can be collected and managed by the ISGroup Security Operations Center (SOC).
Periodic Reporting
With the desired frequency, from monthly to annually, the key elements of the service are presented to the CSO/CIO/IT Manager, such as identified attacks, prevented attacks, successful attacks and their impact, improvement points, and main risks for the organization.
If in the wireless communication security monitoring service, the Client selects the WiFi standard frequencies 2.5 GHz (802.11b, 802.11g, 802.11n, 802.11ax) and 5 GHz (802.11a, 802.11h, 802.11j, 802.11n, 802.11ac, 802.11ax), the organization will be able to identify and protect itself from a wide range of attacks.
Depending on the technology and attack technique, the protection will be of the IDS (Intrusion Detection System) type, i.e., notification only, or of the IPS (Intrusion Prevention Systems) type, and therefore prevention and blocking.
The client can request TIER-3 analysis (Cyber Incident Analysis) by our experts and, depending on severity and risk, the response (Cyber Incident Response) of a team on-site or remotely.
Output
As the service is continuous, the reports produced will be provided at a periodic frequency agreed with the client.
In particular, the report will consist of a technical document containing the relevant aspects of the service, including:
Prevented attacks.
Any successful attacks with technical details and impact analysis.
Suggestions for improving current security.
Risk analysis that the company faces with the current infrastructure.
Wireless Monitoring
and compliance
NIS2
Monitors wireless networks, detects anomalous accesses and devices and supports the network security measures under NIS2 Article 21(2).
DORA
Detects anomalous wireless activity and unauthorised access to financial systems, contributing to protection and detection under DORA Articles 9-10.
GDPR
Identifies unauthorized wireless access to systems that process personal data, contributing to the technical measures under GDPR Article 32.
PCI DSS
Detects authorized and unauthorized access points in the payment data environment, supporting PCI DSS 11.2 and 1.3 requirements.
ISO/IEC 27001
Monitor wireless networks, segmentation and access, contributing to A.8.20-A.8.22 ISO/IEC 27001:2022 network security controls.
CIS Control 13
Detects devices and anomalous wireless traffic and contributes to the network monitoring and defense described by CIS Control 13.
Frequently asked questions about
Wireless Security Monitoring (WSM)
What does Wireless Security Monitoring monitor?
ISGroup Wireless Security Monitoring continuously monitors the selected radio technologies and frequencies in the areas to be protected: Wi-Fi, Bluetooth, NFC/RFID, cellular networks and other agreed protocols. For devices and industrial environments, the IoT/OT Security Assessment provides a dedicated technical assessment.
Which activities does the WSM service include?
Wireless Security Monitoring includes a Wireless Security Assessment in the first year or after radical changes, followed by a GAP Analysis against the objectives, as well as installation, integration, monitoring and periodic reporting.
Does Wireless Security Monitoring block attacks or report them?
Wireless Security Monitoring can report anomalies to the internal team, with the option of TIER-3 escalation to ISGroup experts. The management model and any on-site or remote response depend on severity, risk and the service agreements.
What does the Wireless Security Monitoring periodic report contain?
The Wireless Security Monitoring periodic report summarises identified or prevented attacks, any successful attacks and their impact, the main risks and opportunities for improvement. Its frequency, from monthly to annual, is agreed with the customer.
How long does Wireless Security Monitoring last and how much does it cost?
Wireless Security Monitoring is a managed subscription service: the fee includes hardware, software, installation and integration, monitoring and reporting. Duration and price are defined in the proposal according to the areas, technologies and frequencies to be monitored.
Shape your security priorities into a tailored proposal