Security audits involve a set of periodic, pro-active compliance and assurance activities that help assess the Security of the IT infrastructure of your organization.
Security Audit Service
An audit of this nature is typically carried out at the enterprise IT organization level and its objective is to assess the IT infrastructure in the context of security and availability. The elements covered in this service are:
Network devices like firewalls, Intrusion detection systems, VPN etc
Deliverables
Analysis of gaps in existing IT network infrastructure.
Vulnerability Assessment Service
This assessment service determines the nature of security vulnerabilities which exist on the network as well as hosts, and methods of mitigation. The vulnerability assessment covers network equipment like routers, switches, firewalls etc. and Operating systems like Windows NT, Solaris and Linux. This activity is usually performed by executing tool-based scans on network and hosts within the client internal network. DATABASE DBA also provides an External Penetration testing Service. The objective is to assess the security posture of Critical Internet facing equipment. This activity is usually performed by executing tool-based scans on network and hosts that are visible on the Internet.
Deliverables
Vulnerabilities on each network device and host Recommendations to identify the right safeguard plus findings and specific ecommendation for each system.
Managed Security Services
Our spectrum of managed security services ensure that you have one, fully accountable source that manages your security issues while you focus on your business. We provide 24x7 support based on well-defined SLAs and our service cover incident and alert handling as well as reporting and trend analysis. For instance, we implemented an intrusion detection system for a global IT solutions and services organization. Our services include:
Management of firewalls: This includes configuration management,backup, archival, software version upgrades and network address translation management
Management of intrusion detection system
Malicious content and Internet filtering: This includes URL screening, Trojans, virus scanning, protection and detection, blocking
malicious java applets, etc.
Management of virtual private network: This includes configuration changes, software upgrades and generation of logs and reports.
