|
Manage the
Security of Your Network |
When considering security, it really comes down to managing
risks. Organizations balance resources, both economic and
human, against the possibility and severity of a security
breach. Each organization's risk tolerance and business
strategy is different.
Oxygen's philosophy is to work with you to understand your
business security objectives. We will identify appropriate
control objectives that map to your business objectives,
evaluate relevant controls to meet identified objectives and
report findings and recommendations based on our assessment.
In essence, we will work with you to avoid problems
associated with undesired entry into your network and
provide recommendations regarding the protection of your
data and network.
|
|
Network
Security Policy |
A documented security policy is necessary to provide a
proper security framework for your network. This policy
defines expectations for proper computer and network use and
documents the corresponding procedures to prevent and
respond to security breaches. It also determines which
assets are worth protecting and what actions or inactions
threaten those assets.
|
|
Anti-Virus
Security Policy |
Every contact between systems is an opportunity for virus
infection, whether it is through physical media, such as a
floppy disk, or via electronic methods, such as E-mail.
Today's computer viruses are designed to proliferate and to
do so at a rapid pace. In May 2000, it took a single day for
the I Love You virus to gain full strength. In summer of
2001 it took 90 minutes for the Code Red worm to get there
and in September of 2001 the Nimda virus took about 30
minutes to reach its peak. These viruses could have had
serious implications for organizations that don't have a
solid anti-virus strategy. An anti-virus strategy that is
well documented and maintained will allow you to recognize
and triage an outbreak rather than simply react to one.
|
|
Firewall &
Internet Security |
Business users of the Internet want to use this tool to
improve their operations (do things better, faster,
cheaper), increase their revenue by attracting new
customers, or improve the relationship with their existing
clients. However, the Internet, like any other society, is
plagued with the kind of individuals who enjoy the
electronic equivalent of eavesdropping, graffiti, stealing,
or plain and simple harassment. When you have real business
to get done how do you protect your sensitive or proprietary
data on the Internet? Usually, a firewall's purpose is to
keep the undesirables out of your network and away from your
data while still letting you get your job done
|
|
Vulnerability
Security Assessment |
Most people think security breaches are typically an assault
from outside the network. However, industry studies show the
majority of breaches originate from inside the network. With
more and more remote connections to your network, a user no
longer needs to be physically within your office to gain
access to your network.
Now more than ever, it is critical to test internal systems
for vulnerability. User id and password policy needs to be
reviewed, as well as analyzing exposure from wide area
network links. An internal vulnerability security assessment
is like the external vulnerability security assessment, but
is a scan and review of the internal network. A
comprehensive report outlining security risks in priority
order and practical solutions to minimize security
vulnerabilities is provided.
|
