2015 ESOS Guidelines Chapter 7, 8 & 9 – Sign-Off, Compliance & Appeals

Network Security

The easiest way for an external threat to get to your private data is through your network. The easiest way to eliminate that threat? Get your data out of the network. Of course, we know you wouldn’t want to do that. We also know that while you may want to sniff every packet for anything suspicious, you wouldn’t want your network to crawl either.

That’s why we’re offering to put up the most efficient checkpoints on every route that leads into and out of your system.

So what can you expect from our brand of network security?

• Review of your policies and processes for weaknesses – If we see a loophole, we’ll recommend modifications wherever necessary.
• Protection for your applications and infrastructure – Since we’re familiar with both software and hardware-based protection systems, we can recommend which type is best suited for your setup.
• Automated identification of business and mission critical applications – They’ll be given priority in your network to ensure bandwidth allocation is optimised.
• Automated network audits and vulnerability management – Tired of getting prompted by pesky vulnerability notices and don’t know what to do with them? Well, that’s why we’re here.
• Customisable security reports that contain only relevant and accurate data.

We can also help you with the following:

• Network Security
• Firewalls
• Malware
• Authentication and Access Control
• Mobile Security
• Forensics

Mobile Security

Today’s advanced enterprises make extensive use of mobile devices in order for team members to exchange information, collaborate, and carry out business whenever and wherever they need to. BlackBerries, iPhones, Google Phones, and other smartphones as well as PocketPCs and PDAs are now allowed wireless remote access to the enterprise network.

As a result, they introduce additional vulnerabilities into the system.

• Bluetooth exploits and unencrypted passwords can allow malicious individuals to gain access to private information.
• Various wireless technologies that have substantially simplified the task of transferring data have provided openings for malicious code. In addition, the diversity of these wireless technologies combined with the constrained environments of these devices have made it difficult to come up with an all-in-one solution.
• All PocketPCs, PDAs and smartphones can be synchronised with PCs and laptops, giving malware an entry point into computers and networks. Memory cards are guilty of this too.
• VoIP, which are usually unencrypted, allow other people to perform unauthorised capture and recording of private conversations.

Mobile security is still an emerging discipline. Because of this, many organisations that allow members’ mobile phone access into the network don’t actually have a specific security policy for such devices.

That’s why we’re here to help. We’ll conduct a thorough evaluation of your security policies and systems in relation to mobile devices and seal gaps we spot along the way. If you don’t have the needed policies or if what you have needs an overhaul, we’ll set everything up (including the needed applications and infrastructure) for you.

Once we’ve got everything in place, you won’t have to worry about the vulnerabilities mentioned earlier. In addition to that, your organisation will already be capable of preventing the following:

• Access to company information when the phone ends up in the hands of anyone other than the authorised user.
• Being billed for phone usage due to virus activity
• Unauthorised phone activity monitoring through spyware
• Other disruptions caused by mobile-based malware

Other defences we’re capable of putting up include:

• Network Security
• Firewalls
• Malware
• Authentication and Access Control
• Mobile Security
• Forensics