IT Security has become a boardroom-level business concern for many companies.
Now more than ever, businesses must consider and address the risks associated
with e-business and IT technologies.
Gibraltar’s Security Solution consists of a layered offering of products and
services that when combined offer a comprehensive information security program.
Our approach includes five fundamental layers:
|
Products |
|
Baseline Information Security Assessment |
|
Initial assessment of an organizations security measures.
Establishment of a security baseline that reflect the business objectives.
|
|
Vulnerability Analysis
|
|
Automated and manual analysis of computers and networks to determine
vulnerability to security threats
|
|
Penetration Testing
|
|
Active attempts to compromise systems, using a full suite of hacker tools.
|
|
Security Policy & Procedure Development
|
|
Development and implementation of security policies and procedures.
As a minimum this includes baseline security standards, review procedures
and penalties for security violations.
|
|
Intrusion Detection System Implementation
|
|
Design and implementation of network and host based intrusion detection.
Recommendations for ongoing management and monitoring
|
|
Incident Response Process Development
|
|
Development of processes to respond to incidents in a controlled
and effective manner.
|
|
Anti-Virus planning, design and deployment
|
|
Design and deployment of anti-virus scanning technologies for desktops,
severs, email and firewalls.
|
|
Firewall design and implementation
|
|
Implementation of effective DMZ zones to protect an organizations internet point of
presence.
|
|
Services |
|
Managed Intrusion Monitoring and Protection |
|
Fully monitored and managed host and network intrusion detection services.
|
|
Managed Firewall Service
|
|
Monitored and managed firewall services.
|
|
Managed Anti-Virus Services
|
|
Assured up-to-date anti-virus protection.
|
|
Incident Handling Service
|
|
Fully managed incident response team, including eradication, recovery and follow-up.
|
|
Education
|
|
Training sessions for users, developers, system administrators and management.
|