solutions
vertical solutions
takeaway pdfs

Application Security

Business Continuity and Disaster Recovery Planning

Emergency Management Services

Information Security Outsourcing

Information Security Services

Security & Assurance

Security Assessment

Third Party Risk Management Services

Emergency Management for Higher Education

Emergency Management for Schools

IT Security for State & Local Government

Take them, share them...

Business Continuity and Disaster Recovery P... (936KB)

Emergency Management for Higher Education (297KB)

Emergency Management for Schools (325KB)

white papers
webinars
articles
news

Managing Third Party Risk
Some sources of risk that may not be top-of-mind include your service providers, web hosting services, contractors, outsourcers, supply-chain nodes, consulting services, and travel services—any number of outside entities having custody of or access to your sensitive information. If your extended enterprise includes these third parties, you need a way to manage this risk.

Take the white paper (4.5MB)

Securing Your Constituents and Institutional Information
In this presentation of Security by Example by Carolyn Ryll, you will shake your heads at common mistakes, but learn how not to make them yourself.

Access the replay

Local Government Emergency Services: Setting Yourself Up for Success
This article, by CIBER’s A.J. Briding first appeared in IAEM Bulletin in October 2007

Take the article

14 Apr 2010
CIBER Successfully Completes Upgrade to Hillsborough County Public School’s Lawson Applications
Read the press release | Take the PDF (25KB)

14 Apr 2010
CIBER Schedules First Quarter 2010 Earnings Release and Conference Call
Read the press release

client quote

“CIBER demonstrated outstanding experience working with other major cities, like the City of San Francisco, in creating strong e-Gov offerings that resulted in high citizen satisfaction. Based on their hands-on experience, 30-year history of successfully working with local governments and their commitment to creating a strong local presence, we selected CIBER as our strategic web management partner. We are confident CIBER has the expertise to help us develop a site and service offering that will benefit our citizens now and for years to come and place our City in the top tier of ‘best practices for City e-government web services’.”

Dr. Melodie Mayberry-Stewart — Chief Technology Officer, City of Cleveland

Security blog

Manage Operational Risk Like a Bank!
posted: 08 June 2009 by Eric Tompkins

See more articles in the Security blog

For more information about our Application Security services & solutions, please contact:

303.963.2112
bbird@ciber.com

Bonnie Bird
Manager, Marketing

Application Security

Do your customers apply for loans online, order products online, check their account information online, or input personal information in order to access services online? The data they provide is most likely not only passing through the application they originally accessed, but it is also passing through other “back end” applications that process it in some fashion. Web-enabled businesses and service providers need to know that their Web applications, and even the Web applications used by their business partners, are potential targets for malicious users looking to compromise sensitive business and personal data. All applications that support any business process must be designed and tested to ensure that they protect the information they handle and/or store.

Wide-Ranging Strategy

Every time an organization adds new vendors, creates a new sales promotion site, or deploys a new Web application, the Web developers must know what kinds of security questions to have in mind during the development process. Because Web sites are in a state of constant flux, organizations cannot be content with a one-time Web application assessment. Rather, organizations must develop and follow a strategy in Web application design, testing, and development that maintains a security posture that is tailored to their specific needs. This focus on security must also be extended to the network infrastructure that supports the application once it is deployed. An application that has been designed securely must also be hosted in a secure and monitored network environment to prevent an attacker from using a network vulnerability to compromise data that has been processed by the application.

Software Code and Design Review

In addition to assessing Internet-facing applications, CIBER Global Security also assesses vulnerabilities in internal applications, including automated and manual testing for both the technical and nontechnical controls, as well as code review and application design. Do your employees process personal information using HR software, track project progress and artifacts, process payroll checks, use EDI or EFT to process receipts and payments from vendors or clients, or manage repositories of client information? How do organizations ensure that the information remains confidential, maintain the integrity of the information, and at the same time make certain the information is available to those who need it (CIA)?

Comprehensive Assessment

CIBER's Global Security Practice provides security assessments that can be used to help organizations develop strategic plans to keep data that is processed by applications secure. CIBER will take a comprehensive view of the application and can provide not only an Application Security Assessment, but can also conduct an External Control Assessment, Internal Network Assessment, Host Assessment or a Program and Practices Assessment to ensure that the application and its associated data reside in a secure environment.