Security Audit
Malicious network threats - both internal and external - are relentless and on the rise. A recent CSI/FBI study found 90% of the respondents said they were impacted by security breaches. Of those who suffered a breach, 70% said the breaches were serious resulting in theft of proprietary information, financial fraud or sabotage of their data or networks. The average loss that these companies experienced due to financial fraud or theft of proprietary data was over $1 million dollars.
Unfortunately, signature-based security solutions such as antivirus, intrusion detection systems and firewalls are simply not to proactively identify and prevent potential security threats from compromising their network infrastructure, disrupting critical business processes and sapping productivity.
To compound the security challenge, the time between the release of a vendor patch for a discovered vulnerability and when a worm or malicious exploit code takes advantage of that vulnerability is shrinking dramatically. Two years ago, the NIMDA worm relied on a vulnerability that was almost one year old. The Blaster worm last year relied on a vulnerability that was less than a month old. This year the Sasser worm was released just 17 days after the LSASS vulnerability - discovered by eEye - was announced.
Today, enterprises need a proactive, continuous vulnerability management process to fully identify and remediate vulnerable digital assets. According to CERT, 95% of all attacks come from known vulnerabilities and thus most attacks are preventable. The problem for many is not the knowledge of the existence of vulnerabilities; it's a fact that the sheer volume of vulnerabilities creates an IT and resource management challenge
Software Audit
Review legal and regulatory aspects of I.T. systems (e.g. software copyright compliance, protection of personal data).
Software is one of the most valuable technologies of the Information Age, running everything from PCs to the Internet. Unfortunately, because software is so valuable, and because computers make it easy to create an exact copy of a program in seconds, software piracy is widespread. From individual computer users to professionals who deal wholesale in stolen software, piracy exists in homes, schools, businesses and government. Software pirates not only steal from the companies that make the software, but with less money for research and development of new software, all users are hurt. That's why all software piracy — even one copy you make for a friend — is illegal.
A software Audit will help you determine what software is installed on your company’s computers thus giving you the ability to identify any illegal/unlicensed software.
As the number of PCs and Internet use grow, the incidence of software piracy is growing, too. The Business Software Alliance believes new technologies should enhance ways to access and distribute copyrighted works legally, not illegally.
IT Strategy Audit
Review various aspects of IT strategy, vision, and plans, including their relationship to other company related strategies, visions and plans, and finding a way to make these processes work together optimally.
We do a full needs analysis for your company before we even start implementing any IT related processes; be it hardware or software related, which means that you don’t get a generalized IT solution for your business, but a personalized one that fits in with YOUR companies processes and policies. This also means that there are no unnecessary expenses for equipment or software that you do not need, or will not use.
Disaster Contingency and Recovery Audit
Disaster contingency/business continuity planning/disaster recovery audits: review arrangements to restore some resemblance of normality after a disaster affecting the IT systems, and perhaps assess the organisation’s approach to risk management.
|