Network Security | Security Posture Assessment
InterLAN Consulting can help organizations to secure their networks, systems, applications, data and other resources by undertaking a Security Posture Assessment (SPA). This assessment will identify the current level of security readiness in the organization, and evaluate the effectiveness of existing security measures, policies and response mechanisms.
The growing demands on business, technology and networking often result in conflicting demands being placed on a corporate network. Many times, the balance between data sharing, and security are in conflict. The need to add system components, system utilities, and functional capabilities can result in corporate network configurations growing in a haphazard and often insecure manner.
We will employ a combination of tools and processes to map out the organization’s current security posture, as well as identify and prioritize existing exposures. The assessment can be done externally and/or internally, since a larger percentage of security breaches are caused by company employees and internal exposures are not less critical to protect then external ones.
Some of the steps included in our SPA process are:
• Site inspection
• Business assets identification and impact assessment
• Network architecture and configuration review
• Security architecture and configuration review
• Security Policy and documentation review
• Incident handling procedures review
• Access control and connectivity review
• Internal/external threat identification
• Network penetration testing
• Security vulnerability assessment
• Validation of security posture compliance with applicable privacy legislations, such as the Canadian Personal Infomation Protection and Electronic Documents (PIPEDA) Act; the US Health Insurance Portability and Accountability Act (HIPPA); Ontario PHIPA and other State, Provincial and Federal Privacy of Information laws
At the conclusion of an Security Posture Assessment, we will present a report, documenting our findings and the recommended action plan.
next...
|
