Security in an e-Commerce Environment

Internet security will be an issue for as long as companies continue to neglect the security needs of their network and choose not to understand the security threats, how these affect their organisation and how company protection should be developed and organised.

Mathias Elvang, Managing Director of Defcom UK, an independent IT security service provider explains, "Internet security is improving fast, but at the same time, so is the amount and sophistication of IT criminality. It is therefore essential for companies to make security integral to their overall business strategy and for them to invest in a fully developed network security programme."

Defcom is a group of Internet and network security experts who closely monitor IT criminality and understand the threat an organisation may face. Founded and headquartered in Sweden during 1999, Defcom now has over 115 employees throughout Europe, with presence in the UK, Germany, Spain, Denmark, Norway and Finland.

Defcom only employs consultants who are experts in the major network and Internet security areas. These consultants make recommendations to alert IT managers of any vulnerability found in the company network, so that they can make informed judgements of any necessary implementation. Since Defcom is independent, the company always makes recommendations based on the best solutions available.

Defcom has developed a number of important services within the following areas, which are designed to detect and protect against the threats of Internet crime:

Defcom Audit service comprises a comprehensive vulnerability analysis and penetration test of the customer's network to highlight areas of risks and any suspicious network patterns in order to pre-empt any attacks. As risks are identified they are then prioritised in a risk inventory analysis. Risk and security-handling methods within these areas are reviewed and evaluated. This is followed by extensive penetration testing of the network conducted under realistic circumstances.

Defcom OnGuard 24 operates as a "virtual security guard" 24 hours as day, 7 days a week. By monitoring the output of sensors placed within the client network from our surveillance centres and reacting according to the company's needs and specifications, the service minimises the possibility of attacks succeeding. It provides effective protection of the customer's digital assets from both external and internal threats.

Defcom Strategy is an effective partner for evaluating an organisation's current risks related to the use of IT. The strategy team assists management with analysis and in-depth reviews of existing IT operations to identify areas for improvement. The areas of focus include, Organisation and Management of MIS Activities, Application System Development and Maintenance, Systems Software Support, Computer Operations, Security Administration and Logical Security.

Defcom Education offers both public and customised educational services for IT security personnel aiding in prevention and increased awareness of IT related crime and hacking in general. The courses teach how to view network architecture and security facilities from a new perspective i.e. that of the hacker and are offered at three levels to meet the needs within the organisation - management, security officers and technical experts (advanced Internet security course). By teaching about the different 'threat scenarios' against networks, managers learn about the security loopholes which their networks are at risk to, enabling them to pinpoint the real security improvements necessary.

Defcom Forensics is a service to assist in-house investigation into IT related criminal activity. The investigation can either be conducted as an internal investigation, with no reference to external agencies or presented to the customer upon completion as a basis for further legal action.

"It is vital that managers, security officers and technical experts within companies are fully aware of the necessity of securing their networks from the outset, commented Elvang. "However, it's rare for managers or IT staff to have the skills and knowledge to deal with the threats. Through Defcom OnGuard 24, our network surveillance service and our training courses and seminars we provide comprehensive, permanent solution to a company's security."

For further information on Defcom and its portfolio of services, please visit www.defcom.com or telephone 020 7614 4600.

Defcom
16 Finsbury Circus
London EC2M 7B
Tel: +44 207614 4600
Fax: +44 207614 4602
www.defcom.com
Contact: Terrence Peters