Security

Providing the Appropriate Solution to Protect Your Company's Assets
A secure computing environment does not simply occur. Effective Network Security encompasses many areas, including technology, human relations, and business methodology. At ProSys, our Network Security Practice focuses on developing a strategy to fit each client's business specific requirements. Using a combination of market-leading technologies, consulting strategies, and fully supported implementations, the ProSys Network Security practice can assist an organization in protecting its most valuable corporate assets.

A strong security program begins by looking at a firm’s business needs, determining how it conducts day-to-day operations, and then developing a scope of work that delivers security at a level complementary to the business requirements. ProSys' Network Security Practice accomplishes this goal utilizing its tested methodology to deliver the following service solutions:

• Assessment and Penetration Studies
• Architecture and Implementation for Secure Infrastructures
• Specialized Solutions

Assessment and Penetration Studies
Determining what to protect is key to ensuring that your security plan will be economical as well as highly effective. Our Assessment and Penetration Solutions program assists clients in the creation, modification, or assessment of their security program. We start with a customized, business-focused interview process to better understand current business initiatives, culture, and the overall technical environment to create a targeted plan for a successful project. ProSys' Network Security team then executes the test plan(s) to determine where the client's business is most vulnerable to compromise or damage. The assessment is designed to identify internal, external or combined vulnerabilities, based on the nature and scope of the engagement. ProSys' Network Security team employs industry-leading commercial tools, as well as proprietary vulnerability identification systems and methodologies to provide the most comprehensive view of the client's network security posture.

Additional areas of the assessment may include, based on scope:

• Reviews of the organization's current Information Security Policy and Procedures, including recommended remediation and policy development
• Physical Security assessments of client premises
• Social Engineering to determine the availability of confidential information

The key deliverables will include:

• Detailed network topologies, as discovered
• Prioritized vulnerability and risk information
• Remediation recommendations, including budgetary estimation, if so scoped

Architecture and Implementation
These Security Services offering focuses on technology implementations. Through on-going service to our clients, we have found and tested a select number of market-leading products that provide great assistance in the delivery of a secure computing environment. Each of these products fulfills a demand for a specific task within a secure environment. Our tests have proven that no single product is capable of meeting the demands of all environments.

A strong firewall product rarely has the capability within it to provide other functions such as strong authentication or mail filtering. Often, the manufacturer makes up for this weakness by optimizing the product to support a complementary application. The integration of these applications into the total security solution can provide strong results.

ProSys supports a variety of technologies including Firewalls, Intrusion Detection, Virtual Private Networks, Authentication, Bandwidth Management, URL Filtering, Content Control and Monitoring products. Our engineers are certified in all of these technologies and have an excellent track record of successful implementation. Additionally, included in every implementation is detailed documentation to fulfill corporate procedural requirements.

ProSys has experts trained and certified by the industry's leading security manufacturers. Our consultants and engineers can design innovative solutions to help insure your enterprise's data is secure.

ProSys' enterprise data security services and solutions:

• Active Content Monitoring and Intrusion Detection
• Authentication and Certificate Authorities
• File and Session Encryption
• Virtual Private Networks
• Vulnerability Scanners
• Enterprise Security Administration
  

• Network Designs
• Vulnerability Assessments
• Network Security Maintenance
• Firewall Installations and VPN Designs
• Access Control Management
• Monitoring and Security Policy Development

Specialized Solutions

Business Continuity Planning and Disaster Recovery
No one likes to think of the effect a disaster can have on your daily operations. However, the possibility always exists for some unplanned event to bring your business to a screeching halt. Unexpected situations, ranging from a key storage device failure to a natural disaster, can paralyze youroperations. A strong Business Continuity Plan addresses how your enterprise must respond to a disaster, minimize its effect on continuing business, and define a quick recovery path. ProSys' Security consultants can assist in the creation ofan effective Business Continuity Plan, as well.

User Awareness Training
People are the key in an Information Security or Disaster Recovery Program. Training assures that your people will be the strongest link in your security program. ProSys' Enterprise Solution can assist your organization in the creation of a User Awareness Training program that reflects corporate security requirements.

Federal Regulatory Compliance Reviews - HIPAA and Gramm-Leach-Bliley
Under new federal legislation, many financial service providers, health care networks and practitioners are now integrity and protection of client and patient data through an on going assessment program. To better meet these requirements, and to provide the highest degreeof customer confidence, ProSys' Information Security Practice has developed a methodology to effectively deliver technology, policy/process and security assessments to our financial service and healthcare clients. The specific methodologies address all components currently set forth or pending, and are in accordance with ISO 17799, formerly British Standard 7799 - Information Security Standards.

IT Security has become a boardroom-level business concern for many companies. Now more than ever, businesses must consider and address the risks associated with e-business and IT technologies. ProSys can help keep your business secure.