Security Auditing
Open Source Solutions’ security engineers are experienced in assessing the vulnerability of your information system to all classes of external and internal security breach. Open Source Solutions can deploy remote, automated security analysis software for quickly and economically uncovering a wide variety of technical security gaps that can be detected via the Internet. Open Source Solutions’ advanced security audit consulting services, which can be provided by security professionals with CISA, CISM, CISSP, ISSAP, or GIAC certifications, can help your business evaluate your procedures, operations, and governance policies and assess your IT infrastructure to enable you to design the highest level of security into your information system. Open Source Solutions’ security engineers can also test your web applications for security vulnerability and can conduct corporate-wide security audits to validate your company’s compliance with major security standards including HIPAA, FISMA, NIST, PCI, and ISO.
Open Source Solutions’ consultants are familiar with the use of auditing software such as Nagios, Microsoft’s Baseline Security Analyzer tool, GFI LANguard, NMAP Port Scanner, AMAP Application Scanner, EEYE Vulnerability Scanner, plus tools from Solar Winds tools, Metasploit, Netcat, Hydra, and Nikto, to perform a variety of automatic system scans to identify potential problems:
Security Compliance Testing
Open Source Solutions’ certified security engineers can conduct extensive security audits of enterprise-wide security to determine your company’s compliance with key industry security standards including HIPAA, FISMA, NIST, PCI, and ISO 17799. Open Source Solutions’ consultants can also recommend and help you implement improvements to your security policies, processes and infrastructure in order to bring your organization in line with these exacting standards. By adhering to internationally recognized benchmarks of security, your business can assure management, partners, vendors, customers, and regulatory entities that your information system provides a trusted environment for industry and commerce.
High-level Network Security Audit Consulting
Open Source Solutions can provide the services of a CISA, CISM, CISSP, or ISSAP-qualified security engineer able to provide your company a comprehensive IS security audit. Progent’s security audit engineers offer a wide range of expert consulting services for small and midsize businesses and can deliver these services remotely anywhere in the U.S. or in person in key cities nationwide. Areas covered by Open Source Solutions’ security audit consultants include:
- IS Audit Process
Open Source Solutions can provide IS audit services in accordance with IS audit standards, guidelines, and best practices to assist your company in ensuring that your information technology and business systems are protected and controlled. Services available from Progent include: - IT Governance
Open Source Solutions can help ensure that your company has the structure, policies, accountability, mechanisms, and monitoring practices in place to achieve the requirements of business-wide governance of IT. - Systems and Infrastructure Lifecycle Planning
Open Source Solutions can help make sure that your management practices for the development/acquisition, testing, implementation, maintenance, and disposal of systems and infrastructure will meet your company’s objectives. - IT Service Delivery and Support
Progent can help provide assurance that your IT service management practices will ensure the delivery of the level of services required to meet your company’s objectives. - Protection of Information Assets
Open Source Solutions can make sure that your security architecture (policies, standards, procedures, and controls) promotes the confidentiality, integrity, and availability of information assets. - Business Continuity and Disaster Recovery
Open Source Solutions can help ensure that in the event of a disruption your business continuity and disaster recovery processes will ensure the timely resumption of your IT services while minimizing the impact on your business.