POLICY & ASSESSMENT

Risk Assessment is a critical first-step in the information security lifecycle. Security should not be thought of as a product or a point solution - it is a process. Network Presence will work with you to assess the risks your business faces, test the identified risks, weigh the risk of inaction versus the cost of action, create a policy to support the assessment, implement tools and processes to reduce the risks, and monitor and enforce the policy and its implementation. Without understanding the business risks it is difficult to justify security expenses and realize how they directly benefit the company's mission.

Security Policy Development provides the foundation for any security project. Our consultants will work with you to draft a policy that focuses on both the business and technical needs of your organization. A successful security policy will address concepts such as corporate growth, partner and vendor relations, legal aspects of data security, user awareness, and fundamental security concepts such as access control, authentication, and auditing. The key to information security is consistency. An effectively implemented security policy provides a consistent baseline for the overall security of the business.

Network Architecture Design is a service designed to provide high-level expertise on an as-needed basis to assist in the architectural design of large-scale security solutions. Network Presence will actively participate in planning sessions and meetings and will take a hands-on role in leveraging the risk assessment profile and technical security policy to define a process for integrating security controls in a network. We will suggest solutions to problems, propose workarounds to limitations, and highlight any areas of concern or caveats. Coupled with our integration service, our architecture services can take you from zero to a fully implemented solution quickly and with an emphasis on quality and follow through.

Network Penetration Testing provides empirical testing and best-practices peer review to ensure the network is well designed and has effective security controls in place. Our penetration testing methodology is designed to take advantage of the creative insights of our senior consultants through actual by-hand interactive system penetration and manual analysis of all testing data. We deliver our findings in the form of a comprehensive report that describes the testing methodology and process we used and documents each vulnerability with solutions and recommendations. We will provide full details on every potential security weakness analyzed in the context of your network.