IT Security

Today’s organization is concerned with protecting critical corporate information, guarding against data leakage, proactively monitoring, preempting and mitigating threats, and ensuring regulatory compliance. With business success contingent on being able to operate in a secure environment, CSOs are challenged with building and maintaining a secure IT infrastructure.

Building, Managing and Maintaining a Secure Infrastructure

Lincoln’s Security Consulting Services help companies assess, design and implement proven security practices that reduce vulnerabilities, mitigate risk and meet industry regulations within the context of an overall security strategy. As an independent advisor to our customers, we leverage our best practice-based methodology to deliver the following consulting services:

• Vulnerability Assessments and Management
• Regulatory Compliance
• Infrastructure Consulting
• Security Strategy and Policy Development

Vulnerability Assessments and Management
A critical part of a company’s security strategy is to identify the current level of risk and exposure they face and to understand how to monitor and respond to the growing number of threats. Internal and external threats can cripple your network infrastructure, leak critical intellectual property and expose important customer data, negatively impacting your corporate reputation and customer relationships. As companies introduce new forms of communication and remote access to their network, the level of exposure increases. Lincoln’s Vulnerability Assessment and Management Services utilize industry best practices and our proven methodology – including scanning, testing and analysis, to enable businesses to identify, prioritize, mitigate and manage internal and external threats. In addition to identifying vulnerabilities and providing actionable recommendations for remediation, we will also develop a framework and ongoing process to help you effectively manage risk and continually improve your security posture. Lincoln’s Vulnerability Assessment Services include:

Enterprise Vulnerability Assessment
Lincoln provides an in-depth analysis of a company’s entire network environment to identify potential areas of exposure. We assess the corporate infrastructure – including servers, operating systems, firewalls, routers and switches, as well as the network architecture, endpoint security, connectivity, remote access and security policies.

Penetration Testing Analysis
Lincoln’s Penetration Testing subjects an organization’s network systems to real-world intrusion attempts. While a vulnerability assessment identifies intrusions that could happen, a penetration test proves what can actually happen. Lincoln’s consultants simulate malicious hacker attacks to test the security of your infrastructure and specific applications.

Wireless Security Assessment
We identify the risks associated with a wireless network infrastructure. By analyzing a company’s wireless business requirements, network architecture, configuration, and standards, we discover vulnerabilities that would enable unauthorized users to access privileged networks and resources.

Malicious Threat Assessment
Lincoln monitors and reports on the incidence of threats at Internet egress and ingress points through the use of network intrusion detection sensors. We track the occurrence of external threats and attacks on a company’s network, as well as threats emanating from within the network.

Internet Risk Assessment
Lincoln’s consultants evaluate and test a company’s Internet infrastructure and connections as well as employee Web behavior and recommend solutions that limit exposure.

Product Security Assessment
Lincoln provides a structured security analysis of a firm’s commercially available product. Whether the product is an appliance, software, or a complex integrated solution, we use advanced discovery techniques to detect vulnerabilities and variances from optimal security practices.

Industry and Regulatory Compliance
Almost every industry is governed by strict regulations designed to address customer data security issues and financial governance. With extensive experience across multiple verticals, Lincoln’s industry specific assessment methodology helps clients identify vulnerabilities, review security policies and evaluate and implement best-in-breed security solutions. We enable clients to interpret and translate industry compliance standards into practical solutions. We work with you to create a security strategy and framework, leveraging industry-leading technology, processes, policies and procedures – while incorporating compliance requirements.

Regulatory Gap Analysis
Our Regulatory Gap Analysis provides a thorough assessment of your current security posture in relation to pertinent regulatory security standards such as Sarbanes Oxley, GLBA, HIPAA, BASEL II, ISO 17799 and ISO 27001. We verify any security exposures and weaknesses in countermeasures, and detail recommendations that ensure alignment of IT practices with regulatory requirements.

Payment Card Industry Compliance Services

• Payment Card Industry (PCI) On-Site Assessments – Lincoln is qualified to deliver PCI On-Site Assessments. Our PCI services help clients meet the exacting requirements defined by the credit card industry and are performed by experienced, certified security specialists. We enable you to understand your risk exposure and deploy innovative and effective mitigation measures to achieve regulatory compliance.
• Payment Card Industry (PCI) Network Scans – Lincoln is industry approved to perform online network scans. These scans serve as a regular assessment of compliance with the PCI data security standard and are required by most major credit card companies.

Infrastructure Consulting
Lincoln’s experience delivering Security Integration and Support Services enables us to help customers design, architect and implement a secure environment. Our security engineers have extensive expertise in innovative technology solutions and industry best practices that address today’s security challenges – such as defending against the latest threats, viruses and worms, reducing spam and spyware, protecting customer data and ensuring secure remote network access. Lincoln has in-depth knowledge in the following areas:

• Security Infrastructure – Firewall and IPS design and implementation
• Identity and Access Management – Strong authentication, encryption, single sign-on
• Messaging – Email & IM security, anti-virus, spam filtering, content management
• Network Infrastructure – LAN and WAN design and implementation

Security Strategy and Policy Development
In order to build and maintain a secure IT infrastructure environment it takes more than integrating the latest security systems – it requires a comprehensive security strategy – as well as effective policies to reinforce the strategy. Lincoln works with clients to assess their business requirements, current security infrastructure and framework, and employee behavior to develop a complete and adaptive security strategy that employs technology, people, processes, policies and procedures.