IT Security Solutions Provider

Since the 1990s, the Internet has been connecting billions of computers, mobile phones, PDA terminals and games machines and also brought along a de-facto standard – Internet Protocol (IP). Providing that you have a device that is on the Internet using the IP protocol, you will be able to establish peer to peer data communications, anywhere in the world, at a very small cost.

On the other hand, the Internet has become the place where hackers and virus programmers can easily reach anywhere in the world within a second. New network topologies such as xDSL and fibre, that have been developed for convenience, can also provide superb bandwidth for network intruders and can leak an enterprise's valuable data at the speed of light. Recently an Internet Service Provider in Asia had to admit that the personal information of their 400,000 subscribers had been leaked, and it is said they were obliged to spend over $20m to maintain their brand management.

There is no doubt that self-protection is essential in order to protect information from those intruders who try to destroy or obtain important corporate data, or to distribute computer viruses. Information security management has become CSR (Corporate Social Responsibility) to most companies managing their own or their customer's information.

Single points of failure can cause serious security breakdowns in any corporate network. This can be caused by the simplest of errors in system design and implementation or by corporate security policies being poorly established at a management level.

Common examples of this are where fully qualified product engineers leave unnecessary NetBIOS on dial-up networks, the use of public IP subnet addresses in corporate LANs and the unnecessary introduction of routing protocols. It is a common complaint from users that they have had their Administrator rights removed! Many corporate managers do not believe that the threats to their data will become a reality.

To satisfy the CSR demanded by the public, corporations are required to assess their assets, analyse risks, establish security policies, establish disaster recovery or business continuity plans, monitor and test, regularly audit and maintain these policies. All members of a corporate IT team should be aware of these and be regularly trained.

ISO27001 is a guideline for Information Security Management System (ISMS), that recommends a PDCA circle (Plan - Do - Check - Act). Exlayer believe that a number of small PDCA circles for, various stages of an ISMS project, produces the larger PDCA circle that establishes a strong corporate ISMS.

Exlayer, registered to ISO27001, are able to provide both security management consultancy and implement security controls. This combination ensures that our valued customers don't get caught out.

Call us today on 020 7650 5966 to discuss your company's requirements.