Security Workshop

Increasingly, your internal networks are being connected to the outside world. In some cases this connection takes the form of Web site providing information about your organisation to the world in general; in others, the connection may be providing electronic business functions to customers; in still others, it may be the interconnection of your internal networks with those of your suppliers, customers, or business partners.

Regardless of how your connections to the outside world are being used, these connections create new security challenges that require different approaches to security than those that may have worked in the past.

Strasan’s Security Workshop service is designed to help you understand these new challenges and develop your own management plans to meet them. The activities of the workshop include:

• Understanding the business activities that are using your external connections
• Understanding the key threats/perils related to these activities
• Understanding the nature and priority of your organisation’s specific security requirements
• Understanding and analysing the security implications of your network topology
• Identifying and analysing the key security components in your network design
• Identifying and analysing the security characteristics of key applications related to your external connections and business activities
• Discussing the security implications of your future business plans and any impacts they might have on your current network topology and components.

How Strasan can help?

1. A workshop conducted as described above by two Strasan Consultants with key representatives of your organisation who are responsible for business management, network architecture and management, platform management, information security management, and application development and support.

2. Optionally, a report delivered within a week following the workshop that describes the strengths and weaknesses found with conclusions and recommendations for short and long term management actions that could maintain or improve the security of your network consistent with your business objectives.

In this service, we work together with your staff to both identify the issues and to train your staff in how to distinguish them and protect against them. In effect, this is a joint training and audit engagement designed to teach your staff how to audit your own systems where we act as your experts and guide you towards a more secure system. This service starts with an agreed agenda and action plan for a specific task, system or audit need.