Projects and pricing

Security review

Finance

Private Equity

10

1 UK site

London

Cisco LAN, firewall, VPN routers and BT Net Internet access

Design and implement a comprehensive, repeatable "white box" security testing cycle to ensure compliance with FSA standards for data protection

• Data collection of all external IP addresses, network devices, directory services and domains
• Definition of non invasive testing modules, timetable and testing windows
• Definition of invasive testing modules, timetable and testing windows
• Implementation of external security penetration testing using port scanning, vulnerability analysis and firewall testing
• Execution of internal security testing using application and hardware vulnerability analysis
• Implementation of invasive testing on internal directory services to analyse user accounts, permission levels and password strength
• SSCP recommendations for remedial work
• Quarterly replication of "white box" testing cycle

None