Network

Network Security Assessment

With all the news devoted to threats and incidents perpetrated by remote hackers abusing the Internet, the security of your internal trusted networks may not have been given all the attention it deserves. Properly implemented network security controls, both management processes and technology, are needed to thwart intentional attacks, to minimize unintentional mistakes from trusted insiders and to prevent exposure of your valuable information assets unnecessarily.

SSG's Network Security Assessment focuses on the security controls implemented for your internal, trusted networks. The assessment will be custom designed to cover whatever system platforms, routers, bridges, switches, or other network components provide the security within your organization.

The technology review component consists of "intrusion tests" and configuration analysis to give you a thorough understanding of the strengths and weaknesses of your internal network components. The management review component consists of interviews with administrators and management and reviews of documented security policies, standards and processes. This provides you with insight into how your organization is prepared to handle the security of your trusted networks over time against potential threats from insiders or outsiders who get through your external security controls.

Range of Services

• review of your overall network design to determine how it effectively isolates untested outside networks from gaining access to your internal, trusted networks and systems
• review of your internal network design to determine how it effectively isolates insiders based on their business function and need to access your organization's valuable information assets
• review of the security design of your selected internal network security components (routers, remote access servers, bridges, etc.) to determine if any functions provided by them could cause undesirable security exposures
• test designed to exercise the security components within the scope of the project in an attempt to gain unauthorized access to portions of your internal trusted network from the perspectives of a trusted insider or an outsider who has penetrated your external defenses
• comprehensive review of the security management controls for the included components covering:
  • policy
  • organization
  • personnel
  • asset classification and control
  • physical security
  • access control
  • network and computer management
  • business continuity
  • system development and maintenance
  • compliance
• report describing the strengths and weaknesses found in all of the above activities with recommendations for short- and long-term improvements