CorpInfo's QuickPlan for Security Provides Expert Technical Services to Assess Your Security Environment

Overview
CorpInfo provides a proven approach to developing an in-depth security plan. This plan combines several security strategies to achieve comprehensive protection. CorpInfo QuickPlan for Security applies a rigorous process to help ensure that the core design decisions required are covered effectively and on schedule.

QuickPlan for Security covers the following main areas:

• Requirements:  We begin with a review of your business requirements and the vision and scope of the project.  Framing the vision and scope early in the process focuses the project, creating more valuable results with less risk
• Security Risk Assessment:  Our consulting team classifies assets needing protection so we focus on the right security risks.  Once we have identified security risks, we prioritize them, using the information gained during the remediation phase.
• Secure Platform:  Developing a secure baseline is critical to protecting your organization’s assets.  These may include Active Directory® domain controllers, file and print servers, and network infrastructure servers.  As appropriate, we develop various mechanisms to help protect against identified threats and align to your security policy.
• Security Patch Management:  Patch management only works when it is a process deployed across your organization.  Our team plans a deployment for an effective security patch management infrastructure.  We configure the solution in a lab environment to provide your security team with a hands-on opportunity to work with the solution for your enterprise.

Risk Assessment
Project risk assessment is a central element of a CorpInfo QuickPlan and is incorporated into all activities. The final report you receive highlights issues that may be a risk in your environment. Early indication of these risks is vital so they can be addressed quickly, before they jeopardize your ability to complete the project on time and on budget.

Deliverables
Interactive design sessions, in which your team learns how to apply CorpInfo best practices to your environment, are a key benefit of a CorpInfo QuickPlan. Understanding how the decisions are made is critical to your ability to implement the recommendations. You receive a detailed written report that includes information gathered, decisions made, and a summary of the next steps needed to help successfully secure your environment.

Outline of Topics Covered

• Security risk assessment
  • Defense-in-depth concepts
  • Asset classification
  • Threat and vulnerability assessment
  • Review security requirements
• Secure platform
  • Security recommendations
  • Building security configurations
  • Components and features
  • Security templates
  • Securing services
  • Access control list edits
  • Server role lockdowns
  • Security decisions
• Security patch management process
  • Inventory/discover computing assets
  • Assess infrastructure and operational effectiveness
  • Discovering software updates
  • Change management process integration
  • Planning and building a release
  • Acceptance testing and preparing to deploy updates
  • Deploy to targeted computers and post-implementation review
  • Configure patch management solution
  • Deploy software updates to virtual machines