Security Audit

Network Security Architecture Design

Security audits involve a set of periodic, pro-active compliance and assurance activities that help assess the security of the IT infrastructure of your organization. They encompass security architecture, policy and vulnerability assessment.

Security Audit

Security Architecture Audit Service

An audit of this nature is typically carried out at the enterprise IT organization level and its objective is to assess the IT infrastructure in the context of security and availability. The elements covered in this service are :-

• Network devices like firewalls, Intrusion detection/prevention systems, VPN etc
  
• Disaster recovery infrastructure and processes
  
• Contingency plan and processes

Deliverables

Analysis of gaps in :-

• Existing IT network infrastructure
  
• Existing disaster recovery plan and processes
  
• Existing contingency plan and processes

Security Policy and Control Audit Service

An audit of this nature is carried out to assess :-

• The gap between the articulated Security policy of an organization via standards like BS7799, SANS etc.
  
• The gap between the articulated Security policy of an organization vis-à-vis the actual deployment of the same

Deliverables for Security Policy and Control Audit Service

• Analysis of the gaps in the security policy via standards like BS7799, SANS etc.
  
• Severity of risk
  
• Recommendations to plug the gaps
  
• Action plan to plug the gaps

Vulnerability Assessment Service

This assessment service determines the nature of security vulnerabilities which exist on the network as well as hosts, and methods of mitigation. The vulnerability assessment covers network equipment like routers, switches, firewalls etc. and Operating systems like Windows NT, Solaris and Linux. This activity is usually performed by executing tool-based scans on network and hosts within the client's internal network. Computrad also provides an External Penetration Testing Service. The objective is to assess the security posture of Critical Internet facing equipment. This activity is usually performed by executing tool-based scans on network and hosts that are visible on the Internet.

Deliverables for the Vulnerability Assessment Service

• Vulnerabilities on each network device and host.
  
• Recommendations to identify the right safeguards plus findings and specific recommendations for each system.