flash movie placeholder

Security solutions

Information Security is a broad reaching concept. Because there are so many points where information can become compromised in this digital era it is important to work with a company that has expertise in all of these fields. ExtenSys, Inc. understands how the need for security has grown beyond that of simple firewalls and anti-virus software. What use to be a small firewall hole for http traffic is now the main tunnel for malware delivery. Just as the memory of modem attached computers fades, today’s cell phones with internet access become the new covert channels out of a network, bypassing all policies enforced at the perimeter. Encryption methods that were secure 5 years ago are easily cracked with powerful processors and pre-generated hash tables. And not so long ago a Terabyte of storage seems like a lot of information to secure, and now that amount of space is consumed by a few users’ mail stores.

ExtenSys, Inc. can help by reviewing your security posture against your existing policies and procedure and make recommendations on how to enforce or enhance them.

Our Methodology Our approach to any assignment is to follow four key steps:

1 Clearly understand and document client requirements and expectations
2 Research and develop a “gap analysis” report that identifies where action must be taken to meet the requirements defined in the first step
3 Recommend and estimate (time, resources, budget etc) the necessary actions to be taken
4 If requested implement or help manage the implementation of the recommendations
In a security related assignment it is also important to recognize that there is a sequence of activities to be followed in order to succeed. A company must define its security strategy and policies first and then develop technology solutions to support them. Security is a risk management exercise and there will likely be layers of security. Security requires an investment but not all corporate assets require the same level of security investment. Corporate Governance Corporate governance is comprised of: Policy which is a high- level statement of and commitment to the security principles of the organization. As a rule they are non-negotiable and stated in a fashion that is not dependant on the underlying specific technology. Most important, they are supported (visibly so) by the highest levels of management. Standards which are a more specific statements relating to the minimum-security requirements that the organizations business units and departments must meet. Standards may relate to specific tools and technologies. Standards may vary according to the regulatory jurisdiction the business unit operates in (country, state, county) Guidelines and Procedures are advice and operational instructions provided to the organization to facilitate the work needed in order to comply with policy and standards. Local conditions often require these be developed by the business unit themselves.