EU Energy Efficiency Directive & UK?s ESOS

Firewalls

There are two main reasons why some companies are hesitant to plug into the Internet.

1. They know they’ll be exposing their company data to outside attacks from malicious individuals and malware.
2. They fear their employees might get too many distractions: games, porn, chats, videos, and even social networking sites.

One vital component for your overall security strategy against such concerns? A firewall.

A firewall can block unauthorised access to certain Internet services from inside your organisation as well as prevent unauthenticated access from the outside. It is also used to monitor users’ activities while they were online.

In an enterprise setting, one may expect a collection of firewalls either for providing layered protection or segmenting off different units in the organisation. Some areas only need a standard line of defence while others require more restrictions. As such, certain firewalls may have different configurations compared to others.

Naturally, the more intricate an organisation’s defence requirements get, the more complex the task of monitoring, testing and configuring the firewalls becomes. That’s why we’re here to help.

• We’ll evaluate your network as well as the security requirements of each department under your organisation to determine which firewall architecture is most suitable.
• To achieve maximum efficiency, we’ll point out where each firewall should be positioned.
• We’ll work with your key personnel to make sure all firewall configurations are set and optimised with your business rules in mind.
• If a large number of firewalls are required, we’ll help you set up a firewall configuration management system.
• Firewalls should be regularly tested and assessed to ensure they are in line with the organisation’s security policies. We’ll perform these routine tasks as well.

Firewalls aren’t very good at defending against sophisticated viruses. There are much better solutions for malware-related vulnerabilities, and we can help you in that regard too.

Other defences we’re capable of putting up include:

• Network Security
• Firewalls
• Malware
• Authentication and Access Control
• Mobile Security
• Forensics

Authentication and Access Control

Threats to your data can come from external or internal sources.

1. There are individuals who don’t have the authorisation but are driven by malicious intentions to gain access to certain information. This may refer to individuals who already belong to your organisation (but don’t have the necessary access rights) as well as those who don’t.
2. There are individuals who have both the authorisation and, unfortunately, the malicious intentions over certain information.
3. Finally, there are individuals who have the authorisation, no malicious intentions, but have accidentally exposed the information in question to those without the proper authority.

While curbing threats 2 and 3 would require other methods, threat #1 can be countered if the right authentication and access control systems are in place.

Here’s what we can do for you:

• Work with your key personnel to determine who gets access to what.
• Help you decide whether a single factor or a two-factor authentication (2FA) is appropriate for your organisation and recommend which factors are most suitable. Login methods may include but are not limited to the following:
  • biometric devices
  • Kerberos tickets
  • mobile phones
  • passwords
  • PKI certificates
  • proximity cards
  • smart cards
  • tokens
• Install the necessary infrastructure needed for the factors chosen. For instance, if you opt to use biometrics, then biometric scanners will be installed. We’ll make sure that the authentication terminals are situated in places where achieving optimal traffic and work flow has been taken into consideration.

Other defences we’re capable of putting up include:

• Network Security
• Firewalls
• Malware
• Authentication and Access Control
• Mobile Security
• Forensics