Information Security Online ServicesTicket system - Change control and job ticketing creates a compliant mechanism for operations. Support tickets help manage communications with Redhawk, track job progress, and provide a secure and compliant means for sharing information.
Online File Manager - Securiely share and store policies, procedures, agreements and other critical files.
Diagrams and Devices - Document your network and security diagrams, as well as all your equipment including IP address and serial numbers.
Managed Security Service Reports - Compliance reports for Firewall Rules, VPN rules / logs and a maintenance database for contracts and serial number tracking. There is also an executive summary report.
Security Assessments - Designed for independent audit by Redhawk or client self-audit, this service uses a risk based approach incorporating industry regulatory and best practice standards. The service reviews Aministrative, Physical and Technical controls as follows:
Administrative and Physical Control Objectives
- Information Systems Strategy, Planning and Personnel
- Relationship with Outsourced Vendors
- Business Continuity Planning
- Information Systems Operations
- Network Support & Security
- Hardware & Operating System Support
- Application Development and Maintenance
- Information Systems Security
- Organization Controls
Technical Control Objective - Security of the Network from External Attack
Tests are performed to identify vulnerabilities associated with the external network. Testing includes vulnerability scanning and evaluation of security in the following areas:
- Internet Design & Services
- Network Border Devices
- Intrusion Prevention System
- Firewall / VPN
- Remote Access
- Internet Servers
Technical Control Objective - Security of the Network from Internal Attack
Tests are performed to identify vulnerabilities associated with internal network and system assets. Testing includes vulnerability scanning and review of security in the following areas:
- Network Design
- Wide Area & Local Area Network
- Internal Servers & Printers
- Wireless facilities
- Vendor and Partner Connectivity
- Logging and Network Time
- Data-in-transit & Portable Devices
|