- IS security
- Personal Data Protection Security Project
- Security Project for Technical Device Designed for Work with Classified Information
- Risk Analysis and CRAMM Risk Analysis
- Personal Security
- Business Continuity Management - BCM
- Business Impact Analysis - BIA
- Network Security
- Protection Against Malicious Code
- Security Incident Monitoring and Management
- Access Control
- Security Policy Enforcement
- Security Control Documents
- Technical and object security
- IT solutions
- SW solutions
Access Control
A reliable and effective access control for sources included in information systems is one of the fundamental prerequisites for securing the required protection level of information assets in each organization. The task of security procedures intended for such purposes is to prevent unauthorized access to individual information system sources and potential data leak, abuse and modification, or configuration changes of important system components.
Access control involves a complex of measures that must be implemented within the entire information system, at all of its levels and within all physical and logical entities that are part of the system. The strength of the security mechanisms applied must be commensurate to the required protection level of individual systems.
We offer complex solutions providing for effective and secure access control at the network, operation system and application levels:
- Network-level device authentication – network access is controlled and allowed for authorized devices only
- Network environment segmentation – creation of logical network segments – communication rules and data flows are strictly defined and controlled
- Operating systems – protection of important system files, registries and services
- Document management – document protection and access control based on strict classification rules
- Single Sign-On – unified log-in system – authorized access to several IS sources with no need for multiple authentication
- Strong authentication – multifactor authentication, e.g. using X.509 certificates, represents a strong access control tool for access to critical systems
- VPN – remote access from external environment – strict definition of access rights based on roles defined in the system
We provide a complex portfolio of services, involving environment analysis, solution design, implementation, testing, optimization and development – even service activities and higher support services.
- We cooperate with world-class multinational companies operating in the field of security technology development (as their partners) and we have a wealth of experience in implementing these technologies.