Cyber security
Practical security for the network and phones your business runs on.
Managed firewalls, monitoring around the clock, timely patching and a toll-fraud watch on outbound calling, from a team that runs business phones, internet and networks every day. We explain what each layer stops and put the plan in writing.
- Managed firewalls with stateful inspection
- Network specialists on duty 24/7/365
- Toll-fraud watch on outbound calling
- Off-site backup vault for managed phone systems
What we cover
Security services from the firewall to the phone system
Pick the layers you need. Each one can stand alone or work with the rest, and every proposal is itemized in writing.
Managed Firewalls
Stateful inspection · Rule management · Firmware updates
We install, configure and manage the firewall between your network and the internet. Stateful inspection tracks every connection, so outside traffic only gets in when it answers a request from inside or matches a rule you approved.
- Rules set to how your business works
- Consistent rules at every location
- Firmware and security updates applied
Monitoring and Alerts Around the Clock
24/7 monitoring · NetFlow traffic analysis
Our monitoring watches your circuits, firewalls and network equipment day and night. When something drops or raises an alert, a ticket opens automatically and our on-duty specialists look into it, escalating to the carrier when the fault is theirs.
- Circuits, firewalls and switches watched 24/7
- Tickets open automatically on alerts
- NetFlow shows which devices talk to what
- Carrier escalations handled by us
Patching and Updates
Firmware · Phone system software · Security alerts
Many attacks use known weaknesses that already have a fix. We keep the firewalls, routers and phone systems we manage up to date, watch for security alerts from the equipment makers and tell you when something needs your attention.
- Firmware on firewalls, routers and switches
- 3CX and the Debian servers it runs on
- Updates planned around your business hours
- Computers and servers, where we manage them
Phone System and Toll-Fraud Protection
3CX · SIP trunks · Outbound call monitoring
SCi’s own monitor watches outbound calling on the phone systems we manage and flags unusual destinations and call volumes. We also lock down your phone system and SIP trunks (phone lines delivered over your internet connection) so they are harder to break into.
- Alerts on unusual destinations and volumes
- Alerts trigger a review of the last 24 hours
- Admin access locked down, strong passwords set
- International dialing only where you need it
Backup and Recovery
Off-site vault for managed 3CX systems
Managed 3CX phone systems back up to SCi’s private off-site vault, each in its own locked account. If a system fails or is compromised, we restore it from a recent copy instead of rebuilding it from scratch.
- Copies kept off-site, away from your building
- Key-based logins instead of passwords
- Plans for files, servers and cloud data
Network Segmentation and Guest Wi-Fi
VLANs · Guest isolation · Cisco Meraki
We split your network into separate zones, called VLANs (virtual local area networks), so trouble in one is much harder to spread to the rest. Guests, staff computers, phones, cameras and card terminals each get their own zone, and only the traffic they need can cross between them.
- Guest Wi-Fi kept apart from business systems
- Card terminals and cameras in their own zones
- The same layout at every location
Endpoint Protection
Managed antivirus · Threat detection
Endpoints are the laptops, desktops and servers your staff use every day. Where we manage them, we install protection that watches for malware and suspicious behavior, with alerts going to our team instead of a pop-up someone dismisses.
- Malware and ransomware detection
- One view of every protected device
- Alerts reviewed by our team
Email Security and Multi-Factor Authentication
Phishing filtering · MFA rollout · Domain records
Many break-ins start with a convincing email or a stolen password. We add filtering that stops much of the spam and phishing before it lands, and roll out multi-factor authentication (MFA): a second check, such as an app prompt on your phone, at sign-in.
- Filtering for spam, phishing and bad links
- MFA on email, remote access and admin logins
- Domain records that make faking your mail harder
- A rollout planned to avoid lockouts
Security Awareness for Staff
Short sessions · Practice phishing emails
People are often the target, not the technology. We offer short, plain-language training on spotting phishing emails, fake invoices and callers posing as IT support or a vendor, plus a simple way to report anything odd.
- Sessions sized for busy teams
- Practice phishing emails with follow-up
- Spotting fake invoices and payment requests
- Reports that open a support ticket
Phone system security
Toll fraud: the security risk that shows up on your phone bill
Many security plans stop at computers and email. Phone systems and SIP trunks need the same care, because a hacked one can be used to make calls you pay for.
Toll fraud happens when criminals get into a phone system or SIP trunk, usually through a weak password, an exposed admin page or an out-of-date system. They use it to call expensive international or premium-rate numbers, often ones that pay them a share of every minute. Attacks tend to start overnight or on weekends, when no one is watching, and the charges usually land on the business’s bill.
SCi runs its own toll-fraud monitor. It watches outbound calling on the phone systems and SIP trunks we manage and raises warning and critical alerts when calls head to unusual destinations or volumes jump. Every alert automatically pulls the last 24 hours of call records for review by our team, and our specialists are on duty around the clock to act on what it shows.
We also make your system harder to break into: admin pages kept off the open internet, strong passwords on every extension and voicemail box, and international dialing turned on only where you need it. A few habits on your side help too.
- Use strong, unique passwords and change any defaults
- Tell us right away when someone leaves, so we can close their access
- Tell us which phones truly need international calling
- Check your phone bill for calls nobody recognizes
- Call us at any hour if calls or charges look wrong
Warning Signs of Toll Fraud
- Calls at Odd Hours
- Outbound calls overnight, on weekends or on holidays, when the office is closed.
- Unfamiliar Destinations
- Calls to countries you don’t do business with, or to premium-rate or satellite numbers.
- Sudden Spikes
- Bursts of short calls, or several long calls at once from one extension or trunk.
- All Lines in Use
- Staff can’t get an outside line, or callers hear busy, because every call path is taken.
- Charges Nobody Can Explain
- International or premium-rate charges on your bill that no one on staff made.
Layers of protection
No single product protects a business
Security works in layers. Each one stops a different kind of problem, and together they make a break-in harder to pull off and quicker to spot.
| Layer | What it stops | What SCi does |
|---|---|---|
| Firewall | Unwanted traffic from the internet and connections nobody inside asked for | Sets and manages the rules, inspects every connection and keeps the firmware current |
| Network Zones | A problem on one device spreading to payments, phones or staff computers | Separates guests, staff, phones, cameras and card terminals, with guest Wi-Fi kept apart |
| Monitoring | Outages, odd traffic and failing equipment going unnoticed | Watches circuits and devices 24/7, opens a ticket on every alert and uses NetFlow data to trace problems |
| Devices and Patches | Malware, ransomware and attacks on known weaknesses that have a fix | Keeps managed equipment updated and adds endpoint protection where we manage computers |
| Email, Sign-In and Staff | Phishing, fake invoices and stolen passwords | Filters mail, rolls out multi-factor authentication and trains staff to spot scams |
| Phone System | Toll fraud and calls placed through a hacked system or trunk | Watches outbound calling, alerts on unusual patterns and locks down access and dialing |
| Backups | Losing your setup to a failure, a mistake or ransomware | Copies managed phone systems to our off-site vault and plans backups for the rest |
Not every business needs every layer on day one. We look at what you have and what’s exposed, then recommend an order that fits your risks and your budget.
How we work
Assess, harden, monitor, respond and review
The same five steps apply whether you start with one firewall or several layers.
Assess What You Have
A local engineer lists your equipment, connections, phone system and accounts, and checks what’s exposed to the internet. You get plain findings and an itemized proposal, and nothing is ordered until you approve it.
Harden the Weak Spots
We tighten firewall rules, split the network into zones, replace default passwords, close access you don’t use and bring firmware and software up to date.
Monitor Around the Clock
Monitoring watches your circuits, firewalls, network equipment and outbound calling day and night. Alerts open a ticket automatically for our on-duty specialists.
Respond When Something Happens
We confirm what’s going on, contact you and act to contain it, then fix the cause and explain what happened in plain language. Carrier escalations are ours to handle.
Review and Adjust
We review alerts, changes and open risks with you on a regular schedule, document what’s in place and adjust the plan as your staff, systems and locations change.
Where it fits
Security shaped to how your industry works
The basics apply everywhere. Each industry adds its own weak spots, and we plan for them.
Healthcare & Pharmacy
Clinics and pharmacies handle patient data and still rely on fax. We keep clinical systems apart from guest Wi-Fi, route e-faxes to the people who need them, and document what’s in place.
See the industryMulti-Site Business
Every location gets the same firewall rules, network zones and monitoring, so a small or new site doesn’t become the easy way in. One team watches them all.
See the industrySchools & Universities
Schools need student, staff and guest networks kept apart. We separate them, look after the phones tied to door entry and lockdown systems, and watch it all around the clock.
See the industryContact Centers
Contact centers place many outbound calls, so fraud can hide in the volume. We watch for unusual destinations and spikes and lock down agent and admin logins.
See the industryHotels & Hospitality
Hotels run guest Wi-Fi, card terminals and room phones side by side. We keep guest Wi-Fi apart from card terminals and front-desk systems and watch room phones for toll fraud.
See the industry
Part of one account, not one more vendor.
- One monthly billWe consolidate your carriers’ invoices into one bill from SCi.
- One point of contactTrouble with any carrier comes to us, whether or not we provide it.
- On duty 24/7/365Network technology specialists, nights, weekends and holidays.
- Dedicated engineersEvery project led by SCi engineers, wherever you are.
Questions
Common questions about cyber security
Still unsure? Call (816) 298-4100 and an engineer will walk you through it.
Are we too small to be a target?
Probably not. Many attacks are automated: tools scan the internet day and night for weak passwords, out-of-date equipment and exposed phone systems, whoever owns them. Smaller businesses often have fewer protections, which makes them easier to get into. A managed firewall, current patches, multi-factor authentication and a watch on outbound calling cover many of the common ways in.
What is toll fraud?
Toll fraud is when someone breaks into a phone system, or the internet phone lines behind it (SIP trunks), and uses it to make expensive calls, usually to international or premium-rate numbers that pay the criminals a share. It often starts overnight or on a weekend, and charges can build up fast. Our own monitor watches outbound calling on the systems we manage and alerts our team when destinations or volumes look unusual.
Is the monitoring really 24/7?
Yes. Monitoring runs around the clock on the circuits, firewalls, network equipment and outbound calling we manage, and alerts open a ticket automatically. Our network technology specialists are on duty 24/7/365, including nights, weekends and holidays, and you can call (816) 298-4100 at any hour.
Can you work with our current IT provider?
Yes. Some businesses keep their IT provider for computers and software and have us run the firewall, network and phones. We agree up front who watches what and who gets each alert, and we coordinate changes with them, so responsibilities stay clear on both sides.
What happens when something is detected?
The alert opens a ticket automatically, and our on-duty specialists look into it. If it’s a real problem, we contact you and act to contain it, for example by blocking traffic, disabling an account or stopping outbound calls on a hacked line. Then we fix the cause, explain what happened in plain language and handle any carrier escalation. You can also report anything suspicious to scisupport@scitel.net, which opens a ticket and emails you the number right away.
Do we need a firewall if we use the cloud?
Yes. Cloud services protect their own systems, but your office network, the devices on it, your phone system and your internet connection are still yours to protect. A firewall controls what reaches them, keeps guest and payment traffic apart and gives us the traffic data we use to spot trouble. Your cloud accounts need care too, starting with multi-factor authentication.
Can you help us meet our security requirements?
We can help, but we don’t certify compliance or give legal advice. We put the controls you need in place where they fall within our services, such as firewalls, network zones, multi-factor authentication and backups, and document what’s set up so you, your auditor or your insurer can review it.
Let’s design solutions that enhance and optimize your business.
Tell us about your locations and what you want to optimize. An engineer will reply with a written, itemized proposal. Nothing is ordered until you approve it.