Security Analysis and Review

The security of any operating system can be greatly affected by how it is configured. PARSEC Group has the knowledge and experience necessary to configure your systems securely based on your needs, applications and compliancy regulations (HIPPA, Sarbanes-Oxley [SOX], etc.).

Security Analysis

PARSEC Group can perform a complete security audit of your IT systems and provide a detailed analysis of what actions can be done to improve the security, provide better auditing capabilities and decrease the effort required to maintain your systems. If a breach of security occurs, PARSEC Group can assist in the review of security data to help determine the extent of the breach and what measures to take to deter or prevent similar breaches in the future. Some topics covered by security audits include:

• Having accountability of all users on the system
• Review of user accounts
  • Verify which accounts are being used
  • Check for accounts which are no longer being used
  • Check for improperly configured accounts
  • Use of shared or guest accounts
• Review of password policy and enforcement
• Network services
  • SMTP
  • Telnet
  • FTP
  • Rexec
  • Others
• Configuration of secure networking protocols
  • Use of SSH vs Telnet
  • Use of SFTP or FTPS vs FTP
  • Use of HTTPS vs HTTP
• Configuration of SMTP mail
• Security auditing
  • Which security events should be monitored
  • How long security data should be kept
  • How frequently security data should be reviewed
  • Who should receive security reports
  • Automatic generation of security reports

Security Review

Do you need an independent security review done on a weekly, monthly or quarterly basis? PARSEC Group can provide your company with a regularly scheduled, independent security review of your systems to verify that the security has not been tampered with in a manner that reduces the level of security or prevents proper reporting of security issues as they occur. This is important in those environments needing to follow mandated security audit procedures (HIPPA, Sarbanes-Oxley [SOX], etc.) for systems containing personal, medical and financial information.

Security Training

Would you benefit from some security training for your operating systems? Our consultants average 35+ years of experience in their fields and can use their expertise and knowledge to help you with all your security needs.

• OpenVMS Academy System, Network and Internet Security (developed by PARSEC Group)
• HP Tru64 UNIX Security Management
• Linux Security Administration for Red Hat and SUSE