| Information technology has revolutionized business, but has
also brought with it new risks. Software vulnerabilities, malicious
(or inexperienced) insiders and increasingly sophisticated hackers
all pose significant challenges to the security of your enterprise
- More than 4,000 Denial of Service (DoS) attacks are launched
each week
- Over 52,000 security incidents were reported to CERT/CC in 2001
- that's more than 144 incidents every day
- Computer worms and viruses caused over $17 billion in damage
and downtime worldwide in 2000
- The FBI estimates that Russian hackers stole over 1 million
credit card numbers from US-based e-commerce companies over
a 12-month period ending in 2001
- The American Society for Industrial Security (ASIS) and PricewaterhouseCoopers
estimate that Fortune 1000 companies sustained losses of more
than $45 billion in 1999 from the theft of intellectual property
- Insiders operating within an organization perpetrate 71% of
malicious security incidents
Businesses heavily invested in information technology need to
effectively manage their risks. The traditional approach to security
relies heavily on products and services to prevent intrusions, but
nothing is impenetrable. Effective risk management involves more
than just deploying the latest security product and hoping for the
best.
Solid Security Infrastructure Benefits the Bottom
Line
The fundamental challenge facing information technology decision
makers is identifying and implementing the architectures, technologies
and processes that reduce the total cost of ownership (TCO) of corporate
networks.
Deploying new technologies - including WLAN, LDAP or VPN - without
adequate security considerations could rapidly eliminate any anticipated
ROI. In addition, having a solid security infrastructure will help
you open new business opportunities, create brand loyalty and increase
customer retention.
Methodology and Process
To help our clients manage security risks, our professional services
organization has evolved a comprehensive work plan covering both
security and privacy issues.
We supplement our risk assessments with technical testing that measures
how vulnerable an organization may be from the perspective of a
hacker. Our technical assessment can detect and correct a number
of IT security risks, including:
- Denial of service (DoS) and buffer overflow vulnerabilities
- Unused and unnecessary open ports
- Vulnerabilities specific to the Windows operating environment
The Datawiz Corp approach to information security involves a process-oriented,
standards-based methodology that breaks risk assessment and remediation
into four discrete components: risk assessment, remediation plan
development, deployment and execution of the remediation plan and
finally, testing. This lifecycle approach to security readily complements
broader, more comprehensive risk management strategies already in
place within the enterprise.
Our method for measuring and ranking security threats allows our
clients to quickly and easily visualize what steps their organization
needs to take to minimize security risks. We also have on hand a
staff of experts who are highly trained in regulations like HIPAA
and can help our clients complete gap analysis and compliance goals
set forth by these new regulations. |