Managed Security Services SECURING YOUR BUSINESS

Transcription

1 Managed Security Services SECURING YOUR BUSINESS

2 Managed Security Services SECURING YOUR BUSINESS Nowadays, ensuring that business systems and applications function properly and are available is of crucial importance. The failure of business-critical IT resources has a major impact and results in significant costs due to the damage caused to an organisation s image, unsatisfied customers and lost productivity. Productivity, security, availability and liability are factors that have a considerable influence on an organisation s success. Handling these properly will make your organisation effective, reliable and stronger and will ensure the continuity of the service it provides. New technical and social developments are giving rise to new issues. IT departments manage hundreds of applications, various platforms and systems from different suppliers. In addition, laws and regulations are forcing organisations to take certain measures. Meanwhile, budgets are being squeezed and there is a shortage of qualified staff. Onsight has the knowledge and resources in house to offer an appropriate security solution for your organisation s entire chain in the form of Managed Security Services (MSS). MSS will allow you to benefit from a security infrastructure that is managed and monitored 24 hours a day by experienced security professionals. Onsight charges a fixed rate and will carry out proactive management, monitoring and comprehensive reporting. The services are scalable and are easy to expand and budget for. All the agreements made are laid down in the form of a Service Level Agreement (SLA). It goes without saying that regular evaluations take place during the contract period to ensure our service is tailored to your needs at all times.

3 Benefits A higher security level immediately Lower costs Screened, qualified staff 24/7 monitoring & alerts Comprehensive periodic reporting Fixed monthly amount: easy to budget for Scalable: desired functionality can be easily expanded Access to specialist security expertise Security always up to date Proactive management Agreements laid down in an SLA Onsight MSS offers you: 24/7 monitoring from Onsight s high-tech NOC and appropriate alerts if there is a threat of production being disrupted; periodic reporting offering an insight into the security and performance level of your network environment, including advice on interpretation and follow-up action; access to replacement systems and/or components in the event of faulty equipment; the Onsight Service Portal, your personal secure environment where you can gain an insight into the current performance of your systems and their security level. Here you can also view your RFCs, call up reports and find an overview of support tickets; registration of all relevant components of your IT infrastructure in a Configuration Management Database (CMDB); a Service Manager, who will coordinate the framework agreement and service documentation with you; a Change Advisory Board (CAB), comprising employees from your organisation and ours, that determines the priority, impact and classification of changes in your network; a 24/7 service desk for fault resolution, information or advice, support or assistance, or the submission of Requests for Change (RFCs). Once the service request has been registered in our ticket system, you will be notified automatically of the status, progress and settlement of the request; permanent security of your network environment through the systematic identification and elimination of vulnerabilities. Customers use MSS to: - guarantee a high level of IT security 24/7 - improve the security and performance level of the IT infrastructure - ensure proactive management, monitoring and alerts - reduce the TCO thanks to efficient specialist management

4 MANAGED SECURITY SERVICES CORE COMPONENTS MANAGED SERVICES STRATEGIC business goals TACTICAL CORE COMPONENTS secure next generation gateway intrusion prevention secure authentication web & security data loss prevention web application security secure remote access application optimization OPERATIONAL reporting configuration management change management 24/7 monitoring & alerting Onsight Service Portal vulnerability management incident management administration & logistics Immediately a higher security level From the moment you decide to work with Onsight as (Network Operations Center) we serve customers right your MSS partner your security level will immediately across the globe. The NOC is the central point of contact increase. Our security specialists will ensure that the for everyday operational communication, monitoring and MSS service is implemented quickly and will take care of alerts and is aware at all times of events within your IT the management of your infrastructure. We will put our knowledge and experience to use from day one to make MANAGED SECURITY SERVICES CORE COMPONENTS your IT infrastructure more secure and to achieve the you never lose your data. business highest security level. Onsight is one of the few IT security goals MANAGED SERVICES specialists to have obtained the highest level of certification secure next generation gateway secure authentication and accreditation for virtually all its products and services. data loss prevention Our employees have been subjected secure to remote the most access rigorous intrusion prevention level of screening by the Dutch government. web & security Onsight web application security complies with the requirements of ABDO 2006 and the application optimization STRATEGIC OPERATIONAL security environment. This means we can guarantee maximum continuity. We also create back-ups of your systems to ensure TACTICAL CORE COMPONENTS Onsight Service Portal reporting configuration management The Onsight Service Portal gives you access to a personal change management secure 24/7 environment monitoring & alerting where you can generate and view RFCs customer portal (Requests vulnerability for management Change), call up reports and view your support incident management tickets. You are also given an insight into the current administration & logistics ISO Information Security Code. performance of your systems and their security level. Lower costs There is no need for major investments in security solutions and staff training you can take advantage of our knowledge, experience and expertise in the area of IT security. Thanks to our comprehensive portfolio, we are able to provide your organisation with the best possible assistance. Economies of scale and the smart application of our knowledge and expertise help us achieve lower costs. 24/7 continuity Onsight is at your service whenever you need us, even outside office hours; we are available 24 hours a day, 7 days a week, to resolve faults. From the Onsight NOC Proactive management By actively monitoring your IT infrastructure, we are able to respond appropriately to suspicious activities and bring these to the attention of the designated individuals. Our NOC performs periodic checks on various components, allowing events to be identified at an early stage and averted in many cases before they actually occur. Fixed amount per month For a fixed amount per month you will gain access to a complete set of functionalities that is easy to budget for and also allows for flexible expansion. This model will not only increase your security level, but will also allow you to achieve significant cost savings.

5 Use Case Web Application Security Attacks on web applications are common threats in today s IT landscape. Hackers and cybercriminals take advantage of techniques that circumvent traditional network and host-based security and technologies. It is essential that organisations take security measures to protect web applications, services and databases. A credit card specialist the leading credit card issuer in the Netherlands decided to work together with Onsight to secure its web infrastructure and guarantee its continuity by means of Onsight s Managed Security Services (MSS). Together with this client a plan was drawn up for the transition from the existing environment towards a secure MSS Web Application Security infrastructure. Approach and collaboration Following an initial introductory meeting, frequent contact was maintained. Various knowledge sessions were organised at which numerous employees from the client and Onsight were present. We really clicked in terms of our customer focus and the way we communicated with each other. This resulted in a robust design for a new web infrastructure for the client offering permanent security and availability. For the credit card specialist it was particularly important that the infrastructure was purchased as a service. This fits in seamlessly with the approach employed for Onsight s Managed Security Services. For the client this means that tasks relating to the security and continuity of the web infrastructure are taken off its hands. Onsight also offers a single point of contact for the overall service. The solution The Web Application Security solution can be structured flexibly. In this use case all components were implemented with redundancy and divided between two data centres. This guaranteed the availability and continuity of the client s web infrastructure at a level of 99.9%, which was laid down in a clear SLA. With a separate management LAN for managing the infrastructure and three-layer web application security and delivery, a robust, scalable and flexible solution was provided to secure the client s infrastructure. Our approach relieved the burden on the credit card specialist in relation to its web infrastructure. In addition to a continuous increase in the security level of this infrastructure, the client also benefited from advantages including: Web application security that is highly scalable and offers a high level of availability (99.9%) The possibility of achieving annual growth in the number of cardholders of around 10% over the next 5 years A measurable security level into which the client has a clear insight An innovative and well-managed service Clear rates with no additional costs within the agreed framework

6 FOCUS ON IT SECURITY With the advent of mobile communication, social business, flexible working and the digital workplace, for example, the boundaries of your operations are shifting and becoming blurred. In this new digital age security services and solutions are essential to predict, identify and respond to vulnerabilities and potential threats, but also opportunities. Whether it is a question of preventing fraud, complying with laws and regulations or gaining an insight into IT risks, Onsight is a partner you can rely on when it comes to protecting your IT infrastructure proactively, cost-efficiently and at every level. securing your business Mr. B.M. Teldersstraat 5, NL-6842 CT Arnhem, the Netherlands P.O.box 225, NL-6800 AE Arnhem T