|
The Problem
For the insurance industry, the Internet has brought new business opportunities and vastly improved processes as well as new levels of extreme risk. To manage this risk, IT managers need flexible security roadmaps that adjust rapidly to both ongoing and emerging threats. MFX security appraisal services are based on this need. As an Information Technology company highly skilled in the latest threats, tools and methodologies, we are acutely aware of the dangers confronting your network's defenses, and are able to provide critical IT security services.
The CorporateShield Solution
Assessing your network's vulnerability
In all cases, MFX network security and system security evaluations use the latest tools and methodologies. Reports are highly detailed. Recommendations are state of the art. And we are fully able to help you implement any changes. MFX can completely, and quickly, assess your Internet architecture including your DMZ, scan for vulnerabilities and evaluate your firewall and operating system for security flaws. By leveraging our expertise you give yourself an ally able to evaluate and mitigate your exposure while you free your staff to focus on other areas.
Vulnerability scanning can be applied to Internet-facing systems and internal LAN-based systems as well as servers, desktops and network hardware. MFX's "white hat" experts can also be used to penetrate your systems in the way real hackers might and then we report on the problems we find.
Assessing your operation's physical security
MFX consultants are ideally equipped to help you evaluate physical facility security, data center security, off-site backup or processing sites and the physical controls surrounding the security of your data including proper and adequate disposal through our detailed IT security evaluation process.
We can also help you simplify overseeing enterprise security with an enterprise security dashboard that tracks at a glance your overall vulnerability and intrusion activity, as well as numerous other events. If needed, MFX's team of social engineering experts can assess employee adherence to security requirements as well.
Evaluating and assessing other areas of concern:
- Defining Security Policy — MFX is unique in its ability
to evaluate critical processes and applications and help you define security policies to protect
your business.
- VPN/Router Security — MFX can assess your architecture, components,
connectivity, access and configurationsto determine your level of risk in this area.
- Network Security Assessments — The complexity of inter-networked systems can easily get out of hand. An MFX assessment review helps IT managers maintain control by pointing out network security risks and providing diagrams and reports outlining further security needs.
- Disaster Recovery Planning — The pressures of contractual obligations, 24/7 uptime, NYSE regulations and business survival demand tested plans. MFX helps you implement a thoroughly tested, working disaster recovery plan able to address both major and common occurrences.
- Managed Security Monitoring/Intrusion Detection Services — This
highly diligent MFX service can monitor your firewall, warn you of any intrusion, the extent of the trouble,
if these are isolated incidents or correlated and if your firewall is blocking planned activity.
- Wireless Security Assessments — If you are extending your internal
network resources beyond your four walls, we can identify vulnerabilities in your wireless architecture and
make detailed recommendations for improvement.
- Dial-Up Assessments/War Dialing — Our team of experts will dial sensitive
phone numbers and record the responses. We then penetrate the systems that answer and report findings plus
recommendations for fixes.
- Application Security Reviews — Before you deploy new web applications or custom code, let MFX application security specialists assess your risk and controls. We review the overall architecture, languages, systems, source code and user management in our application security evaluation. If regulatory compliance is an issue, we will also help you identify the gaps through our data privacy assessments, and work with you to fill them.
Recent studies predict that over 80% of all attacks are internal.
These come from various sources including employees, contractors, visitors, vendors and insecure wireless access points. MFX evaluations address these threats through industry standard "best practice" auditing. Custom developed tools, scripts and work papers assess your system's security and assign risk ratings and resource ratings so you can prioritize your resources and close the holes before you fall into the 80% statistic. In these ways MFX becomes your ally in defending your systems, communications and processes in an age of ever-increasing threats.
Information security and privacy
At MFX, as an application service provider (ASP) whose focus is insurance, we have an intimate understanding of the role that security plays in this vital industry.
Making full use of leading edge security technology, MFX automatically encrypts all of your information in transit from your computers to ours using the Secure Sockets Layer protocol (SSL) with an encryption key length of 128-bits (the highest level commercially available). Before you even log into our site, our server checks that you are using an approved browser - one that uses SSL 3.0 or higher. VeriSign's digital certificate services are employed to authenticate that you are transacting with our Web site.
Your data resides on redundant, fault tolerant servers that are heavily guarded both physically and electronically. Each client's data is maintained separately in encrypted form and system backups are performed regularly both onsite and offsite.
Servers sit behind an electronic firewall and are not directly connected to the Internet.
Physical, electronic and procedural safeguards comply with federal regulations. Self-audits as
well as outside audits are performed regularly and we invite our customers to audit us as well.
And it goes without saying that MFX never discloses a client's information to any third party
for any reason.
|
