Practical Information Security

Americas > Caribbean > Europe > Africa >Asia

Strategic Consulting

Architecture Review


A configuration and architectural review provides a detailed analysis of the security architecture of a network, including the network topology, the installed components, the devices properties, the configurations, the information exchange protocols, the allowed services, etc.

It also makes it possible to evaluate the remote access safety policies, the network's segmentation, the servers' protection, the authentication procedures, the firewall designs, the detection of intrusion systems designs as well as the demilitarized zones (DMZ).


Benefits of a configuration and architecture review

A configuration and architecture review will enable to answer, amongst other things, the following questions:
  • Does the network insure secure communications when needed?

  • Is it possible to access the internal networks without a firewall blocking or IDS system detecting this malicious activity?

  • Is the servers current configuration secure and in accordance with industry best practices and acceptable level of risk?

  • Are firewalls and protection systems' configuration secure, in accordance with industry best practices and acceptable level of risk?

  • Are safety best practices used in the configuration of networks?

  • Do only authorized entities access the infrastructure?

  • Can a hacker take control of our information systems due to configurations or architectural weakness?
Why choose Above Security?

Founded in 1999, Above Security is one of the only Canadian-based companies to focus exclusively on information security. Above Security delivers a comprehensive range of information's security consulting services. Our consultants have contributed to improve the information's security posture of more than 180 organizations in 18 countries.



Download

Download our Architecture Review brochure

Contact

Contact us to discuss our Architecture Review offer

White paper

Risk Management Standards Applicable to an Information Security Management System