http___www.teamnet.ro_hr_it-operacije_sigurnost-informacija__1.xml
1.1 1.2 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 29.2 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1
Our team of experts provides consulting and outsourcing services in Security Management, addressing the following fields: public services and Government, Public Safety, Environment, Agriculture, Transport, Healthcare, Energy and Utilities. With our help, the companies may increase their IT security level, both by implementing new security policies and processes, enabling them to receive the certification for ISO 27001/PCI Information Security Standard and by expanding the capacity of their own IT teams while using our outsourcing services. - Penetration Tests - Risk Management - Information Security Programmes - Training of users - Incident Management - Disaster Recovery and Business Continuity Management - Compliance with the Legislation The Teamnet IT Security Consulting Services are designed to provide the support required in order to get an ISO 27001 / PCI certification – Information Security Standard, to build up information security policies and processes at company level, which are alligned with the current best practices in the industry, to develop data-leak prevention strategies, as well as to create and implement secured applications. - Administration of Prevention/ Detection Systems (IDS/IPS) - Firewall Adminstration - Web Traffic Filtering - Data-Leak Prevention (DLP) - Log Monitoring/Retention - Monitoring 24/7 - Vulnerability Management - Web Applications Firewall - Web Applications Securization - Incident Management - Security Policies Management - Mobile Devices Encryption Our Security Management Services expand the capacities of the IT and Security team of the Client, adding value to our specialists’ expertise who work on improving the security level in order to cut down the risks and to boost the efficiency of IT security. AThENA (Advanced THreat and Event aNomaly Alerting) Event management and security information market is defined by organizations’ needs to apply Real Time Data and System Security Measures, to detect security breaches early, to collect and aggregate data and to report on log files. All these can be used in internal investigations or compliance audits. Evolution security challenges - Cyberspace Environment has become increasingly more complex by the fact that users are becoming increasingly mobile and more services are published to the Internet or in the cloud, thus growing diversity and number of sources of data to be analyzed; - The number of attacks that are going to establish a bridgehead in the organization persistently have increased, also on the increasing number of platforms connected to resources, - Most current monitoring solutions uses static models such limits, blacklists / whitelists, etc. A new approach is needed to keep up with the significantly increase if the number of security devices. Therefore, we present a new product developed by Teamnet, AThENA. AThENA overview Leveraging Open Source technologies like NoSQL, Stream Processing and Hadoop we have successfully build a Big Data Security Analytics system that combines data from multiple sources and does complex, real-time correlations between all of them. All components that were used are highly clustered for both high performance and high availability, enabling the use of commodity hardware. The Big Data Security Analytics creates a platform where detection is not based on signatures or static correlation rules but on dynamic comparisons to normal baseline behaviors for individuals or groups. Behavior outside the normal baseline determines suspicious activities that may indicate attacker activity. Specifications Roles - Event Receiver - Event Parser - Event Aggregation/ Correlation - Machine Learning for anomaly detection Data Collection - Syslog - Real-time file tailing - Database query - Agent base collection - PCAP Capture Platform Modules The core system provides the following basic functionalities: - Event Collection from Network devices, Operating Systems and applications (machine exhaust); - Event Repository in a high performance and availability database; - Creating Analyses and Building Dashboards; - Creating and managing custom alerts The following functionalities can be added to the core system: - Real-Time Event Correlation between multiple data sources, which can process hundreds of thousands of events per second per processing node; - Packet Analysis at the Network layer; - Machine Learning for anomaly detection is also available in order to augment already preprocessed results; - Event Collection, Interpretation, Correlation and Alerting based on operating system metrics and application through the use of logged information. - CISSP – Certified Information Systems Security Professional - CISM – Certified Information Security Manager - CISCO Certified Specialist - FortiNet Certified Specialist - CEH – Certified Ethical Hacker - ECSA – EC-Council Certified Security Analyst - CISA – Certified Information Systems Auditor - CGEIT – Certified in the Governance of Enterprise IT - HP Certified Technicians - PMP – Project Management Professionals
1.1 1.2 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1
Naš tim stručnjaka nudi usluge savjetovanja i outsourcinga u upravljanju sigurnosti u sljedećim područjima: javne usluge i e-vlada, javna sigurnost, okoliš, poljoprivreda, transport, zdravstvena skrb, energija i komunalne usluge. Uz našu pomoć, tvrtke mogu povisiti svoju razinu IT sigurnosti implementacijom novih sigurnosnih smjernica i procesa, što im omogućava da dobiju certifikat za ISO 27001/PCI Normu za sigurnost informacija te proširenjem kapaciteta vlastitih IT timova tijekom uporabe naših outsourcing usluga. - Testovi prodora - Upravljanje rizicima - Informacijski sigurnosni programi - Obuka korisnika - Upravljanje nesrećama - Upravljanje oporavkom od nepogoda i poslovnim kontinuitetom - Usklađivanje s legalizacijom Teamnet IT usluge sigurnosnog savjetovanja osmišljene su za pružanje podrške potrebne da bi se dobio ISO 27001 / PCI certifikat – Norma o sigurnosti informacija, da bi se izgradile smjernice i procesi informacijske sigurnosti na razini tvrtke koje bi bile u skladu s trenutnim najboljim praksama u industrijskoj grani, kako bi se razvile strategije za sprječavanje curenja podataka, kao i za stvaranje i implementaciju sigurnih aplikacija. - Upravljanje sustavima za prevenciju/otkrivanje (IDS/IPS) - Upravljanje vatrozidom - Filtriranje internetskog prometa - Sprječavanje curenja podataka (DLP) - Bilježenje/zadržavanje dnevničkih zapisa - Nadzor 24/7 - Upravljanje ranjivošću - Vatrozid za web aplikacije - Osiguranje za web aplikacije - Upravljanje nesrećama - Upravljanje sigurnosnim smjernicama - Kodiranje mobilnih uređaja Naše usluge upravljanja sigurnošću proširuju kapacitete klijentovog tima za IT i sigurnost, dodajući vrijednost stručnosti naših specijalista koji rade na poboljšanju razine sigurnosti kako bi se srezali rizici i povećala učinkovitost IT sigurnosti. - CISSP – Certified Information Systems Security Professional - CISM – Certified Information Security Manager - CISCO Certified Specialist - FortiNet Certified Specialist - CEH – Certified Ethical Hacker - ECSA – EC-Council Certified Security Analyst - CISA - Certified Information Systems Auditor - CGEIT - Certified in the Governance of Enterprise IT - HP Certified Technicians