RE: System Security testitng service

[John Candidi <jacandidi@xxxxxxxxxxxxxxxxx>]

All great info. Thanks John!!

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John Jones
Sent: Thursday, March 31, 2011 4:13 PM
To: Midrange Systems Technical Discussion
Subject: Re: System Security testitng service

Define "test the security".  If you mean perform an internal network and/or
application vulnerability assessment, there are lots of companies that do
that sort of thing.

We have McAfee's Foundstone unit do tests both external & internal:
http://www.mcafee.com/us/services/mcafee-foundstone-practice.aspx.  Besides
their appliance & hosted service offerings they also have "white hat"
hackers who can test your apps & environment.  They do the assessment
remotely via VPN.

Another thought would be NCC Networks. http://www.nccnetworks.com/assessment

Other thoughts:
- If you have an auditor that you're comfortable with, check with them.  If
they don't offer the service themselves they can probably recommend a local
resource.
- If you want something more iSeries-focused there's SkyView Partners.
- See if there's a branch of ISSA or ISACA in your city.  As information
security professional associations the local members will know who's who in
your area.  The New Jersey ISSA chapter's web site is http://nj.issa.org/.


On Thu, Mar 31, 2011 at 8:19 AM, John Candidi
<jacandidi@xxxxxxxxxxxxxxxxx>wrote:

> Does anyone use or know of a company that will come on site and test the
> security of your networks? I am looking for a Grade A company that will
> handle everything from soup to nuts
>
> John A. Candidi
> American European Insurance Group
> IT Systems, Application and Support Manager
> Cell  (484-645-5598)
> Office (856-779-2274)
> jacandidi@xxxxxxxxxxxxxxxxx
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.