Network Security “Health Check”
With the complex demands of modern IT provision, sometimes there is just not enough time to validate the security posture of systems within your organisation.
- Are you not sure where you need to start?
- Are you looking for a specialist ‘Health Check’ for networking equipment?
- Are you looking for a simple piece of work to review your current posture?
ESISS are happy to help with your requirements, Information Security for the sector, by the sector.
It is difficult and expensive to keep Information Security skills current; this is where ESISS (EMMAN Shared Information Security Service) can help. EMMAN Information Security specialists will work with you to specify a scope of work specific to your requirements; from a penetration test of one IP addresses to reviewing your network configuration, let us take the strain out of Information Security.
A specialist will work through the scope, providing in-depth inspection and testing to identify current or potential information security threats. We will provide a written report as well as attend a debriefing meeting with staff at your organisation.
ESISS can tailor the scope exactly to your requirements; we have analysed ePayment solutions, network infrastructure configuration, online testing software, remote working environments, network access, Operating System posture and Active Directory configuration. Assessments can be carried out internally or externally and can be approached in the following ways:
- Blackbox testing – This is where the security tester has no knowledge of the system being tested and is designed to simulate an external hacker attack. The exercise would look at gathering as much information about the system as possible (either from an internal or external perspective) and discover any associated vulnerabilities.
- Greybox testing – This is where the security tester has partial knowledge about the system, and tests are designed and targeted similar to Blackbox testing.
- Whitebox testing – This is where the security tester has knowledge about the system being tested i.e. the architecture, IP address details and normally entails specific aspects being targeted as part of this testing.
Some sites request a more holistic approach, requesting “See what you can find in a day!” They are often very surprised at the issues uncovered, many of which had not been considered before.
All members of the ESISS team are certified to the TigerScheme Qualified Security Tester – Team Member (QSTM) level, which is equivalent to CHECK Team Member/CREST Registered Tester. We will carry out testing using a blend of methodologies taken from industry best practice standards such as CHECK, the Open Source Security Testing Methodology Manual (OSSTMM), the Open Web Application Security Project (OWASP) and the Council of Registered Ethical Security Testers (CREST).
Contact a member of the ESISS team who will be glad to take you through the types of testing available and explain what steps would be taken.
Costs depend of the scope, size and duration of the work. Cost start from £650+VAT per day and are dependent upon the resource required to undertake the scope of work.