Datawiz : Secure IT

Secure IT

To Secure Customer Information and IT Infrastructure from Threats

Enterprise Application Security Assessment Services (QA)
Information Security Assessment and Planning (C&A)
Information Security Infrastructure Design
Information Security Management

Provides an on-site review of your institution's applications and database security, identifying the business process, policy, and system environment risks and outlining detailed recommendations for remediation.

Analyzes network and system vulnerabilities and provides actionable steps for rectifying them. Also combines thorough interviews, advanced scanning technologies, and documentation review to identify and resolve areas of exposure within the IT environment.

Policy planning and development
Vulnerability Assessment
Disaster Recovery Planning
Security Program Planning and Penetration Testing
Certification and Accreditation.

The network security architecture design services offered by Datawiz assist our clients in developing a secure, customized architecture designedto address the current and future needs of the enterprise. Datawiz consultants conduct a collaborative review of business process and existing network architecture and define client led security requirements. These design services help ensure that all architecture solutions are secure, manageable, flexible, and capable of combating future security threats..

Prepares you and your staff to respond quickly and effectively to security incidents by equipping you with the knowledge and skills required, as well as supplemental personnel expertise as required.

Provide on-going management and maintenance of your security infrastructure
Perform remediation services in response to suspicious traffic or possible intrusions
Manage infrastructure vulnerabilities and assist with security patch and update management
Provide intrusion analysis and compliance reporting on your system infrastructure.

Information is central to our customer’s mission. Therefore any amount of data loss, network failures, malicious intrusions or mishandling of data can result in far-reaching damage. The Datawiz IT security program protects the confidentiality, integrity, and availability of enterprise information, computers, and networks. Datawiz’s IT Security Program strategy is to apply security countermeasures in layers working together with our clients to reduce risk. These layers include detection and response capabilities, user awareness, desktop security, network security and compliance monitoring.

Services and Results

Detect, prevent and respond to IT security events	Expanded Computer Incident Response Team operations to provide vigilance over systems Implemented additional intrusion detection/prevention systems to thwart hackers Implement Internet content filtering to protect employees from web based attacks and scams
Increase user awareness and training	Published data handling guidance to improve security awareness across enterprise Conducted additional focused user security awareness and rules of behavior training to increase user commitment to sound IT security practices.
Protect the end points in the IT infrastructure	Ensure continuous monitoring of potential vulnerabilities Defined enterprise patch management processes Secure enterprise applications to protect data and public services from compromise and loss
Improve network security	Initiated HSPD-12 access privileges with identity management Implemented firewall and network management Leveraged the Department of Homeland Security Cybersecurity Initiative
Monitor compliance	Standardized implementation of Federal Desktop Core Configuration to secure user desktops Continued enterprise implementation of the Cyber Security Assessment and Management system for enterprise compliance with FISMA standards Expand Certification & Accreditation (C&A) compliance review program to facilitate removal of material weaknesses, increase FISMA grade and improve the availability, accuracy, and timeliness of processes and products
Improve preparedness and response	Conducted quarterly CIO COOP Table-Top Exercises that address a full range of issues that may impact IT responsibilities Incorporate contingency planning into customer’s continuity of business planning efforts

Satisfied Customers

Department of Labor - Mine Safety and Health Administration, Office Inspector General, Job Corps
Department of Agriculture – Food Safety Inspection Services
Committee to Purchase from Severely Blind and Disabled – CBSD

Achievements / Accomplishments

Established an Information Assurance Plan and security layer within the MSHA Enterprise Architecture to ensure proper consideration of security requirements in all phases of the IT life-cycle.
Made dramatic improvements in terms of compliance with Federal Information Security Management Act (FISMA) standards, accrediting (100%) percent of MSHA IT Systems
Initiated a formal process and common controls to expedite the certification and accreditation of all MSHA systems and developed a (3) year plan to ensure future accreditation
Substantially reduced the number of preventable security incidents to 50% in 2008 for MSHA.
MSHA received award for accomplishing 100% security awareness and Role base training during the year of 2008.

BuildIT

SecureIT

ManageIT