Investments in security should be made sensibly, based
on the level of risk and potential business impact. E-mail security
is a business issue but in most companies e-mail security lies outside
the control of security specialists. Security personnel tend to focus
on issues such as firewall configuration, network intrusion detection,
authentication and access. But in most companies the majority of data
passing between internal networks and the outside world is e-mail.
E-mail is the primary means of information dissemination
in business today and few decisions or internal announcements are made
without using e-mail. User demand for access to e-mail over the Web,
from remote locations via dial-up or Internet, and from mobile devices
makes e-mail inherently more vulnerable than other systems. The first
step toward a more secure e-mail system is analyzing vulnerabilities,
gathering business and technical requirements, and evaluating technology
options beginning with currently deployed technologies.
Successful analysis requires technical understanding,
business awareness, and effective methodology. GSS brings these ingredients
together in a single service that helps customers understand and successfully
manage risk. GSS E-mail Security Services Include:
- Security Auditing
- Security Investigations
- Public Key Encryption (PKI)
- Identity-based Encryption
- Security Solution Architecture
- Detailed System Designs
- And more...
GSS E-mail System Auditing
The GSS E-mail Security Audit involves systematic data collection and
thorough analysis including the following areas:
- Business requirements
- IT and user policies
- IT operations
- Usability issues
- Systemic vulnerabilities
- Configuration issues
- Technology limitations
GSS evaluates vulnerabilities and links each area of
risk to potential business impact. Customers receive a comprehensive
GSS E-mail Security Report and Recommendations document. Many
security services focus on theoretical problems and propose costly and
impractical solutions. GSS reports provide clear descriptions of problems
and recommend solutions based directly on customer requirements. The
GSS methodology follows these steps:
- Identify Vulnerabilities
- Evaluate Risks
- Determine Solution Options
- Map Solutions to Requirements
GSS gives customers new options to reduce or eliminate
vulnerabilities based on the degree of risk and potential business impact,
and GSS balances these factors with business needs.
Dealing with Security Technology Issues
Messaging vendors support technologies like Public Key Infrastructure
(PKI) security using X.509 digital certificates for Secure MIME (S/MIME).
PKI solutions can be costly, cumbersome for administrators and inconvenient
for users. PKIs don’t address issues such as non-PKI e-mail clients
like as Web browsers, PDAs and wireless devices, or communication with
non-S/MIME users over the Internet. Some security solutions can secure
e-mail on the wire within your network but don’t work over the Internet
or if data are accessed directly on a server rather than a particular
client application. Some vendors provide solutions to secure e-mail
between companies but only if both companies use the same technology
or product. New technologies may help but most e-mail software vendors
don’t directly support the latest security technologies. GSS focuses
on real-world solutions putting practical architectural and configuration
enhancements before costly new technology deployments.
Security Solution Design
While other companies represent particular technologies or products
GSS takes an objective approach focusing on customer-specific business
and technology requirements. Armed with a GSS E-mail Security Report
and solution options with clear trade-offs, customers can make informed
and intelligent decisions that will stand the test of time. Once a set
of solution components have been selected the next steps are to design
a coherent solution and to successfully build and deploy the solution
without disrupting users or IT operations.
GSS has successfully designed and deployed solutions
ranging from enterprises to some of the largest ISP and telecom systems
in the world. GSS can help you to cost-effectively understand and manage
risk and to assure that your e-mail system is secure.
Experience Superior Value
With GSS customers always know what they will receive, how much they
should invest, and how long it will take to achieve their goals. Over
the years GSS has proven its value by helping customers successfully
meet the most demanding IT challenges. GSS has relationships with major
vendors that involve training and certification of GSS staff, but the
certification that GSS points out most frequently is customer loyalty.
GSS is successful because GSS customers are successful.
Global System Services Corporation (GSS) is the leading
provider of consulting and professional services for large-scale and
distributed infrastructure systems such as email and messaging, directory
services, groupware, and wireless solutions. GSS customers include Fortune
500 companies, large services providers and telecom companies, government
agencies, major messaging product vendors, and innovative technology
startups.
GSS provides a complementary suite of services including
strategic technology consultation and competitive vendor and product
analysis, product and system architecture and design, system development
deployment, customization, and testing, technical support, email migration,
and other IT services. GSS has been directly responsible for some of
the largest global systems and solutions and counts as customers many
of the largest companies in the world.
From its offices in the Silicon Valley California, GSS delivers services and solutions to customers
worldwide through a network of mobile consultants and qualified GSS
Affiliates. With industry certified professionals on staff, GSS is a
Qualified
Lotus Business Partner, a Certified
Microsoft Solution Provider (MCSP), a Principal Partner in the Sun Partner Advantage program and a member of the Sun Software Partner Council, as well as a member of key industry organizations.