Enterprise Security 
  Related Links
   

Today, the abundance of laptops, wireless networks, PDAs, mobile devices, outsourcing, offshore partnerships – while aimed at increasing efficiency – has lessened security on all fronts. Every single one of these multiple entry points to the network represents another opportunity for compromise.

There is no silver bullet for network security. In the real world of the dynamic network, constant re-evaluation is the new norm. Change is the only constant. And as the threats change and the lines around the network blur, the potential impact of those threats changes as well. Proactive measure is a must.

Digital Encode has access to some of the best network security consultants in the industry and can offer and deliver a wide variety of proactive professional security consulting services to our clients. The following are specific proactive service offerings that Digital Encode.
Tech brings to the corporate world.


ISO 17799 compliance / BS7799 certification (ISMS)
NEW : ISO 17799 : 2005 Compliance !
ISO 17799/BS7799 provides a list of protection measures that organizations should adopt to build a comprehensive security infrastructure. ISO 17799, the internationally recognized information security management standard, is a direct descendant of BS7799, which is finding increasing acceptance by companies in the areas such as business process outsourcing, offshore software development and in-house IT services.
We at Digital Encode believes that this globally accepted and highly marketable system ensures a sustainable security cover.

Vulnerability assessment (VA)
Digital Encode's VA consultants use an exhaustive methodology that clearly points out the weaknesses and deficiencies, from a security standpoint, in any given system. Organizations across the world have to be sure that their systems will run continuously.
Digital Encode’s VA is critical for organizations that need to ensure this. The idea is to minimize or, better still, eliminate the chance of a security breach. Organizations feel a particular need in this regard when they are shifting their operations or launching new systems. At, Digital Encode , our assessment criteria is comprehensive, our reports user friendly, our consultants are 'management-friendly', our recommendations being practical, and our data-collection and analysis procedures fast and reliable.

Enterprise security audit (ESA)
An Enterprise security audit involves a review of all processes and practices followed by an organization looking to ensure enterprise-wide security. Additionally, there will be a technical audit conducted across all the locations and devices in the enterprise. Based on the spread and criticality of the devices being audited, there is a judicious mix of remote and onsite audits. The technical audit uses industry-standard tools as well as custom-developed tools.

Penetration testing (PT)
Penetration testing is the testing of networks and their components for security weaknesses. Digital Encode's PT consultants could carry these tests with no knowledge of the network, or as authorized users having restricted knowledge of the network. The test is conducted remotely via the Internet on the IP address, the URL specified by the client, or at the client site (for internal penetration testing).
• Light perimeter test — Digital Encode's PT consultants test the strength of the perimeter from a remote location.
• Full perimeter test — Digital Encode Tech's PT consultants verify the security of the perimeter, the servers in the DMZ with remote exploitation of DMZ and accessible internal systems.
• Internal test — The 'trusted insider' test, where Digital Encode's PT consultants launch this test from inside the client's network, with internal exploitation.

Security code review (SC)
A security code review assignment involves the rigorous testing of the existing application source code for programming and structural faults that may lead to possible security weaknesses. It requires access to the source code of the sections of the application, or the complete application that is being tested. Digital Encode’s consultants will give an estimate of the testing effort from the complexity of the application and the quantity of code that needs to be reviewed.

Application security audit (ASA)
Digital Encode’s consultant would conduct an Application security audit by testing applications remotely over the Internet for security holes, or testing applications at the customer site on a staging server with higher levels of access to the application architecture and documentation. We offer this service in two modes:
• Initial ASA (remote)
• Comprehensive ASA (onsite)



CISSP Boot Camp Training, Lagos in partnership with CCCure
July, 2010. Download the program training brochure for detailed information. Clic



Digital Encode registered as ISECOM/OSSTMM GOLD TEAM MEMBERSHIP
ISECOM is the founder of the world renown best methodology for Security Tester. S

EC-Council LICENSED PENETRATION TESTER