Security

Security Analysis
Evaluations
Education

Today’s headlines are filled with stories of top corporations having being hacked - exposing sensitive information. Unauthorized individuals are accessing the sensitive data of organizations and their customers, creating public relations nightmares and seriously damaging customer, partner and shareholder confidence. These ever-increasing threats, paired with the growing legislative requirements to secure and protect data makes understanding the risks and vulnerabilities of your systems more critical than ever.

GEOBRIDGE’s Information Assurance division offers a wide range of security disciplines to our clients:

SECURITY ANALYSIS
For over a decade, GEOBRIDGE has provided services to Fortune 1000 companies across vertical markets to mitigate risk for organizations. GEOBRIDGE’s Information Assurance division has created a well-defined process that can be customized to a specific organization’s business needs. Our process enables organizations a continuous means of providing and maintaining proper security practices by analyzing the organization’s physical, operational and technological controls. These analyses are also a powerful tool in aiding organizations in their audit or compliance preparations.

GEOBRIDGE works closely with the client during each phase of the analysis. At its completion, a report detailing the findings along with detailed actionable recommendations is delivered to the client. This serves as the foundation for implementing the necessary security policies and solutions to mitigate the risks identified during the analysis and to strengthen the overall security of the organization.

GEOBRIDGE’s Security Analysis Services include:

Network Vulnerability Analysis: Analyze the architecture, implementation and maintenance process associated with an organization’s infrastructure in the context of best practices for information protection

Penetration Analysis: Analyze physical security, external communications and network access control, and hardware/software configurations to identify threats and recommend controls or protective measures

Security Policy Analysis: Analyze documented security policy and compare with existing practice; document inconsistencies and gaps; recommend changes and additional policies consistent with best practice.

Contact Us for more information about GEOBRIDGE Security Analysis Services. Back to top

EVALUATIONS
There are many standards and similar criteria defining requirements or providing guidelines for technologies, products or implementations, but often there are no compliance programs to achieve certification or accreditation. Further, standards evolve and keeping current is problematic and time consuming. For example, ISO 17799 is now outdated and many organizations cannot even name the new standard, much less have any idea what is on the roadmap for replacing the previous ISO standard. We can help, because our professionals participate on—and in some cases chair—the committees that develop these standards. Don’t simply catch up to the curve; rather stay ahead of the curve with our Information Assurance services. We offer evaluation services for products and implementations to provide assurance to conformity, including the following:

American National Standard X9.79 PKI Practice and Policy Framework
This standard defines control objectives and evaluation criteria for the secure deployment of a Certification Authority (CA). Note that this standard is scheduled to be superseded by its international version ISO 21188.

American National Standard X9.84 Biometric Information Management and Security
This standard defines control objectives and evaluation criteria for the secure implementation of a biometric authentication system often used in conjunction with a business application. Note that there is a companion international standard ISO 19092.

American National Standard X9.95 Trusted Time Stamp Management and Security
This standard defines control objectives and evaluation criteria for the deployment and operation of a Time Stamp Authority (TSA) and other parties (Requestor, Verifier, and Relying Party). Note that the IETF version RFC 3161 and international version ISO 18014 address technology requirements but do not include any control objectives or evaluation criteria.

Working Draft X9.111 Penetration Testing
This draft standard specifies recommended processes for conducting penetration testing of financial service organizations; it provides a framework for specifying, describing and conducting penetration testing; and a reporting method for the testing results.

Committee Draft X9.112 Wireless Management and Security
This draft standard defines general requirements applicable to all radio frequency (RF) wireless implementations for the financial services industry.

Contact Us for more information about GEOBRIDGE Evaluations Services.                                Back to top

EDUCATION
GEOBRIDGE’s extensive knowledge of information security is leveraged by many high profile organizations to educate their staff on security best practices and audit compliance requirements.

From retail organizations to financial institutions to healthcare organizations, GEOBRIDGE offers customized education programs to train organizations on everything from the fundamentals of cryptography to key management principles and security policy execution. Our methodology encourages client education.

GEOBRIDGE Education Services provide the following benefits:
     - Customized programs to train employees on your specific environment and requirements.
     - Hands-on participation and procedural walkthroughs to ensure a complete understanding of the practices being implemented.
     - Thorough content covering basic concepts as well as detailed procedures.

Contact Us for more information about GEOBRIDGE Education Services.                                Back to top