Internet

Internet Security Architecture

SSG's Internet Security Architecture is a project in which our security consultants analyze your organization's business and IT strategies to understand the objectives you hope to achieve via the Internet and provide security architecture principles that you can use to ensure your organization's assets are not compromised.

As your organization expands its services to take advantage of the global reach of the Internet, new security controls, both management processes and technology, will need to be deployed and securely managed. The global reach of the Internet can provide your organization with access to current customers, partners and suppliers or open new markets. However, it could also allow global access to your organization's private network. SSG's Internet Security Architecture deliverable will provide you with a comprehensive, standards-based framework for managing your organization's Internet security controls consistent with your business objectives.

Range of Services

• review of your organization's Internet business strategy and related security requirements
• review of your organization's IT strategy, current security concerns, and future security requirements as they relate to your Internet business strategy
• review and analysis of your organization's current security policy, standards and management processes against the needs of your organization's Internet business and IT strategies
• customized security architecture document which sets forth the security principles that will enable your organization to meet its security objectives as business needs change. The document will prescribe management controls related to:
  • policy
  • organization
  • personnel
  • asset classification and control
  • physical security
  • system access controls
  • network and computer management
  • application development and maintenance
  • business continuity
  • compliance.
  In addition, the document will prescribe technology controls related to:
  • identification and authentication
  • access control
  • confidentiality
  • integrity
  • non-repudiation
  • security management