Brand Protection - IT Security Consultancy Services

Vanguard Brand Protection consultancy services provide a number of security consultancy services that complement our Remote Web Application security testing services.

e-Commerce Security Reviews
Many of our customers are facing an ever-increasing challenge to provide their products and services securely over the Internet and other electronic channels.  At the same time the technologies underpinning these channels are constantly changing and the related security risks are multiplying at an alarming rate.   Taking advantages of new technologies to gain a competitive advantage whilst at the same time protecting your corporate brand requires a great deal of skill and expertise.   Often the only way forward is to retain external consultants who will work with your business to review the risks associated with the technologies and applications that you have deployed and make recommendations to assist in the effective management of the identified risks.

Some of the e-commerce infrastructure components that our consultants may review, depending on the scope of the exercise include:

• Design and configuration of your firewall systems and associated networks, including DMZs and middle tier networks.

• Design and configuration of your intrusion detection systems, both at network and host levels.

• Deployment of Monitoring and alerting controls to address the identified risks.

• Application Security reviews, including middle-tier and connectivity to “back-office” systems.

• Security associated with VLANs and other networking and switching devices.

• Determination of the amount of “in-depth” security controls necessary to mitigate against successful penetration by external attackers.

• Security controls to address authentication, authorisation and privacy issues associated with the flow of information from the external facing systems through to “back-office” systems.

The above logical analysis of the threats and associated risks will be supplemented by physical tests designed to probe the infrastructure for security weaknesses, while at the same time allowing the effectiveness of any implemented controls to be evaluated.

To meet this challenge, Sun, IBM, HP and Microsoft are all betting a substantial part of their business on the concept of Web Services.   New technologies are rapidly evolving to address the required functionality for Web Services, including SOAP, WSIF, WSDL, UDDI, XML, .NET, etc.   However you need to be aware of the security implications of these new technologies before you design and deploy applications using these web services. Our consultants can  help you understand the security threats associated with design and deployment of Web Services business solutions.

Web Application Security Reviews
Vanguard Brand Protection can provide our customer with web application security audit services.   This audit is similar to the testing and audit services provided under our Managed Services Programme.   The objective of this audit is to determine the effectiveness of the controls that have been implemented at the application layer to protect your brand and corporate assets from external attacks over the Internet.