Cyber Security

Cyber Security is the act of securing assets, ensuring proper levels of access and identifying potential vulnerabilities of elements involved with the cyber plane. Some prefer the term Digital Security, Computer Security or Information Technology Security (the last is a bit of a mouth full), but here at Poised Solutions we prefer the term Cyber Security in homage to the Burning Chrome and Neuromancer novels by William Gibson where the term Cyberspace was first coined. Cyber Security is a process by which the security of a system is analysed, monitored and improved upon.

Cyber Security is a fairly modern business need, though ever since telecommunications have been around there has always been those looking to subvert the neutral operation of them. Cyber Security is a constantly evolving field, where both new ideas and new awakenings to the need happen daily. Poised Solutions offers Cyber Security services across the spectrum, from System Hardening, though to Security Monitoring and Encryption and on to Penetration Testing.

Cyber Security Fields

Cyber Security can be split into a number of fields. System hardening is the process by which a system's security is improved to prevent and hamper certain lines of identified attacks. Security Monitoring is the ongoing process of checking if a system has been compromised or not, monitoring software running on the machine and remotely is often installed and configured, the process involves checking the logs created by such software and identifying any possible breaches or indications an attack is building. Penetration testing is the act of attempting to gain access to a system through non standard mechanism, penetration testing tests the security of a system. It should be noted that no penetration testing will be conducted without the consent of all authorised parties. Encryption is the use of certain programs that can transform data by the use of some key to a state where the original data is very hard to deduce. Encryption is done by using functions where the inverse function is not mathematically obvious. Encryption is not a silver bullet for security, but for data security it is the closest we have currently. Poised Solutions offers the spectrum of Cyber Security services and can also help in the development of pragmatic business security procedures.

Cyber Security Fields

System Hardening

System Hardening involves the configuration of operating systems and the installation of software to increase the security of a system. System hardening is the first level of defense, and does involve defense in-depth but it should be seen as a start off point. Different systems have different purposes, and as such different system hardening techniques are used to ensure that security and usability are well balanced.

Monitoring

Monitoring is the ongoing process of cyber security. Systems should be checked periodically to assure they are operating as they should and that the security of the system has not been compromised. There are a number of different methods to monitor systems, and different grades of ongoing ease and ease of initial setup.

Penetration Testing

Penetration Testing involves the access of systems using unconventional access methods. Penetration testing is often done in a controlled manner to check the security of a system. Penetration testing also involves both social engineering and technical methods of gaining access to a system. Authorisation has to be given to undertake penetration testing, and generally this has to be given by the head of a company in writing. The actual penetration is done in a manner that closely resembles how a hostile penetration would be undertaken.

Encryption

Encryption is a means by which data can be secured using an algorithm that is hard to reverse without access to the key or token used for encryption. Poised Solutions can implement a number of known encryption algorithms, and also can develop bespoke encryption algorithms.

Security Policy Creation

Poised Solutions offers a Security Policy Creation service, to put into words security policy for operatives inside an organisation. An effective security policy is one of the best ways to improve overall security. The wording of the security policy and how the security policy is introduced to operatives is especially important in ensuring the overall success of the Security Policy. Poised Solutions IT Practice is happy to work to create an effective security policy and identify area in which Cyber Security training would be most appropriate.

Cyber Security Resources

Cyber Security Resources

• Cyber Security Links
• Cyber Security Books