Employees work from offices, homes, and locations around the world. Corporate information resides increasingly in cloud applications rather than on servers protected by a company firewall.
The traditional network perimeter no longer defines the boundary of corporate security.
Protection must instead follow the user, the device, and the data. Oxer implements four complementary security layers, each designed to address a different class of risk.
No single layer is sufficient. Their effectiveness depends on their integration and configuration.
Oxer has evaluated and deployed competing products in each category. The following represent its preferred solutions, based on technical capabilities and practical experience.
Device Management
Security begins with establishing which devices the organization owns and controls.
Device management enforces configuration standards, maintains an inventory of computers, and verifies their compliance with security policies. It also provides the foundation for restricting corporate access to authorized devices.
Oxer uses Microsoft Intune for Windows computers and Jamf or Mosyle for Macs.
These products provide centralized administration and consistent security controls without requiring physical access to individual computers.
Endpoint Protection
A properly managed computer can still be compromised.
CrowdStrike Falcon protects endpoints by monitoring software behavior and detecting indications of malicious activity. Unlike traditional antivirus products, its detection capabilities extend beyond signatures of previously identified malware.
When a computer is compromised, CrowdStrike can isolate it from the network to limit further damage.
Oxer favors CrowdStrike because of its effectiveness in detecting sophisticated threats, including previously unknown malware, and its ability to support rapid investigation and containment.
Identity and Access
A secure computer does not establish that its user is authorized.
Okta provides centralized identity management, multifactor authentication, and single sign-on across corporate applications.
Access can be granted according to organizational policy and revoked centrally when an employee leaves. This reduces the risk of accounts remaining active after their owners are no longer authorized.
Oxer recommends Okta for its administrative simplicity, extensive integrations, and mature identity management capabilities.
Eligible nonprofit organizations can also obtain 50 Okta licenses at no cost.
Data Protection
Even an authorized employee using a secure computer can expose confidential information.
Netskope governs how corporate data moves between users, cloud applications, and external services. Its policies can restrict unauthorized applications and prevent sensitive information from leaving approved environments.
For example, Netskope can prevent a confidential document from being uploaded to an employee’s personal cloud storage account.
This capability, known as data loss prevention, addresses one of the most consequential risks facing organizations whose information is accessible outside their offices.
Oxer selected Netskope after evaluating competing platforms. Its integrated architecture and breadth of controls provide a coherent approach to protecting data across cloud services and the web.
Security Depends on Integration
The four layers address distinct questions.
Device management establishes whether a computer is authorized and compliant. CrowdStrike monitors whether it is secure. Okta verifies who is using it. Netskope controls how corporate information may be accessed and transferred.
Properly integrated, these controls can restrict corporate data access to authorized users on protected, company-managed devices.
The products alone do not establish security. Incorrect configuration can undermine even the most capable technology.
Oxer implements these controls according to rigorous security standards and maintains their configuration through continuous monitoring and review.
The governing principle is straightforward. Corporate information must remain protected regardless of where an employee works or where the information resides.
Does your organization know whether confidential information can be accessed or transferred from computers it does not control? Oxer can help solve this problem.