| Professional Services |
| Extol offers a wide range of professional services that benefit customers by putting at the disposal of customers, expert and experienced engineers, who can promptly and effectively consult, manage, maintain and support the customers' security infrastructure.
|
|
| Infrastructure Review |
| The Infrastructure review is based on the CIA Model (Confidentiality, Integrity and Availability). Each layer of your network’s security is analyzed through the CIA model. The deliverable is a report containing a breakdown of all hosts, network protocols, risk factor and recommendations if the infrastructure has a security risk.
|
|
| Plan Development |
| This service consists of designing and developing a comprehensive security strategy of how to protect a network effectively according to its processes. It develops a plan, which encompasses the current vulnerabilities and set-up and recommends security requirements and solutions, so that the organization can reduce its cost and strengthen its network security and integrity.
|
|
| Vulnerability Probe and Assessment |
| This service is an essential element for a security plan. It reveals the weaknesses in the existing business network, in a detailed report for further action. The assessment enables organizations to periodically receive a report on the status of their vulnerability assessment. This service utilizes Nessus, the most up-to-date Internet vulnerability scanner. Organizations will be able to remotely and securely log into our extranet to view vulnerability reports, which include recommendations and our expert advice on countermeasures.
|
|
| System Integrity Monitoring |
| For host based systems, this service provides real-time alerting whenever any file has been modified, added or removed. It supports multiple sets of checks with real-time alerts. When monitoring networks, this service is used to identify new hosts, new network services, vulnerability assessment and network exploration and mapping. It provides unlimited vulnerability assessment on both the host and network level.
|
|
| Internet Gateway Management |
| This service manages organizations' Internet gateway externally. The gateways include routers, VPNs, firewalls, mail and web servers, dns and proxy servers. It allows minimizing expensive 24x7 internal support personnel.
|
|
| Patch Management |
It is important to keep computers patched to avoid OS weakness from being exploited by hackers, crackers and virus writers. However in large networks, patching can be distressing. The service is inclusive of lab test and verification of patch levels.
- Alert and advisory of related bug reports and correlated with specific asset inventory and patch level.
- Can be used in conjunction with onsite support services to perform patch upgrade exercises.
|
|
| Threat Profile |
Many threats roam the Internet. However, each business faces particular threats according to its IT infrastructure and more so, according to its business activities. For example, a finance institution will fear theft, a e-business will worry about defacement, while most commerce will fear losing their customer database, etc. This service creates a report of the threat profiles and a countermeasure-threat matrix.
The threat profiling toolkit is an open-source software application that creates a report of the threat profiles and designs a countermeasure-threat matrix, with recommendations for the user.
- Development and Maintenance of threat profiles
- Countermeasure-Threat Matrix (CT Matrix)
- An easy user interface software
- A user-friendly procedure
- Recommendations to improve security
|
