Security blog

Manage Operational Risk Like a Bank!
posted: 08 June 2009 by Eric Tompkins
 

IT Assessment Cost vs. Value – A Market Response Analysis
posted: 06 May 2009 by Matthew Sharp
 

See more articles in the Security blog

For more information about our Information Security Outsourcing services & solutions, please contact:

Bonnie Bird
Manager, Marketing

In addition to security incidents, compliance requirements have made company executives accountable to prevent (or at least detect in a timely manner) unauthorized acquisition, use, or disposition of systems that could affect a company’s critical climate.

Legislature and compliance issues are likely to increase, as a result of recent economic events.

Businesses worldwide—and especially those in regulated industries—are required to maintain a strong security posture to minimize the financial impact associated with breaches and compliance requirements. If your core business is not information technology (IT)—staying current on security incidents and regulatory changes can be daunting, if not impossible. Our staff’s job is to stay current on regulatory issues and the cost effective solutions to provide compliance.

Are you prepared to bet your business on your abilities to differentiate between the nuisances and the threats?

CIBER’s Security Experts Manage Your Security and Compliance Challenges So You Can Focus on Your Business

CIBER’s customers benefit from our best-in-class security information and event management system (SIEM) combined with 24x7 operations to:

• Protect information held in trust
• Protect the brand/reputation investment
• Fulfill compliance requirements
• Understand and improve IT security posture and maturity
• Reduce security costs and associated risks
• Free valuable resources
• Demonstrate proof-of-controls to managers, customers and auditors

CIBER successfully manages security threats and challenges when:

• The volume of security events becomes unwieldy
• In-house solutions cost too much in terms of funding, resources, time, and effort
• Resources and skill sets are hard to find and retain
• Regulations require demonstration of proof of controls, a strong security infrastructure, and enforceable policies, 24 hours per day

CIBER’s Information Security and Risk Management Outsourcing services include the following:

• Enterprise Event Management & Monitoring
• Security Device Management (Firewall/IDS/IPS)
• Compliance Logging & Reporting
• Incident Response and Investigation
• Managed Vulnerability Assessments (External/Internal)
• Security Operations Management
• Security Program Development & Documentation
• Security Awareness Training
• Audit Support
• User Provisioning and Enforcement

CIBER: Your Trusted Security Advisor and Partner for Information Security Outsourcing

CIBER offers comprehensive and unparalleled outsourced security services providing an experienced single source for detecting, responding and mitigating security threats. We approach each engagement as a partnership, not a transaction, so you can rest assured your security needs are well managed.

• Experienced and Credentialed: With more than 8 years of experience providing managed security services and more than 16 years providing unparalleled security consulting services, CIBER is an expert in security outsourcing. Our team of Certified Information Systems Security Professionals (CISSPs) provide dedicated and skilled resources 24 hours / day, 7 days / week, 365 days / year with expertise and certifications in security engineering, systems administration, security products, and intrusion response. We know the threat, we understand your environment, and provide responses and services tailored to your specific needs.
• Best-in-Class Technology: CIBER has chosen ArcSight, a best-in-class collection and event correlation platform and powerful reporting engine, to provide the muscle, scalability and personalization of our service. Analyst firm IDC announced ArcSight leads the SIEM market and ranks second in the security management software market (2 December 2008). It is also included in the leader’s quadrant in Gartner’s Magic Quadrant for Security Information and Event Management, 1Q08 (9 May 2008).

Eighty-five percent of all successful hacks attempted are the result of 25 programming errors that support Internet communication and commerce.

The MITRE Corporation, Jan 12, 2009

• Vendor Neutral Approach: We complement your current information security investments, instead of rebuilding them. CIBER does not promote any one vendor or solution over another or require your security system subscribe to a specific platform—we have the ability to monitor them all. We work with you to analyze and evaluate the best solutions for your organization’s needs, regardless of the vendor, product, or platform.
• Human Touch Response: CIBER does not rely solely upon technology to review, escalate, and report detected threats. We become a seamless extension to your unique environment and train our operators and analysts to review, respond and escalate events according to your pre-positioned directives. We assemble thorough playbooks for each and every relationship and provide report results that depict an understandable context of your security landscape.
• Reduce False Positives: CIBER finely tunes event collectors, develops correlation and threshold rules and monitors real-time event channels around the clock to separate the nuisances from the true threats. Customer assigned, threat knowledgeable analysts review escalated events to validate the legitimacy of the threat. This tried and true process reduces erroneous threats, thereby reducing the time, cost, and resources spent chasing nuisances, allowing you to manage your business.
  

Services
Application Development
& Management
 
Business Intelligence / Data Warehousing
 
Customer Relationship Management
IT Outsourcing
IT Security Solutions
 · Unisys Services
Mobility Solutions
Physical Security Solutions
Quality Assurance & Testing
Service-Oriented Architecture
Supply Chain
Global Solution Centers

ERP/Package Solutions
Lawson
SAP
Oracle
 · Oracle E-Business
 · Oracle PeopleSoft
 · Oracle JD Edwards
Technology Solutions
CRM | ERP | SCM

Industries
Charities & Not-for-Profits
Consumer Products & Retail
Energy & Utilities
Financial Services
Food & Beverage
Government: Federal
Government: State & Local
Healthcare & Life Sciences
Higher Education
K-12 Schools
Manufacturing & Mining
Telecommunications
Transportation
Travel, Sport & Leisure

Service Finder Tools
Alphabetical Sort
Line of Business Sort
Industry Sort
Services Map