CND Strategic Business Alignment

Computer Network Defense Strategic Business Alignment is a set of core services that include Penetration Test Management, Security Configuration Management, Security Policy Management, Vulnerability Management, Physical Network Security Management, and Mitigation Management. CND Strategic Business Alignment is focused on identifying your business’ defensive strategy based on critical and non-critical business assets.  We will explain how you're critical business processes relate to Information Security core functions — confidentiality, integrity and availability through an assessment process built to fit your unique business. Never allow a third party to audit your network and leave without explaining how to fix the vulnerabilities and apply cost effective solutions!

Penetration Test Management

Penetration Test Management is how you protect your business through interpreting penetration test data over a period of time and how you manage the trends that develop. Keeping your records of high, medium, and low vulnerabilities is great, but what does that mean to your overall security posture?  What should I test and how often? We can bridge the gap between your business and third party penetration testers or assist with in-house penetration testing

Security Configuration Management

Security Configuration Management is the process of constantly keeping an up-to-date picture of the posture of your network security which includes but is not limited to user objects, user resources, user access controls, security software, and security hardware. We can assist you with understanding and establishing the right processes for your business to implement Security Configuration Management in three easy steps:  Identify Scope > Record & Implement Changes > Monitor Scope.

Security Policy Management

Security Policy Management is one of the most important facets of CND —  it is the process to control and monitor written courses of action, guiding principles, and procedures that allow for the best security practices to positively impact your business. This service includes a Security Policy Management Assessment which will identify policy posture, shortfalls, and solutions.  Based on the Assessment we will work hand-in-hand with your staff to produce specific written policies to address your business needs.

Vulnerability Management

Vulnerability Management is a fundamental understanding of how an organization uses its Vulnerability Intelligence to affect the network security posture of business assets.  This service focuses on how to define, identify, baseline, and organize your vulnerabilities into managed processes so you can control and minimize your business assets’ attack surface more effectively. Vulnerability Management is useless without identifying an end-to-end process that maps business assets to mission priorities. We can help you accomplish this through proven techniques.

Physical Network Security Management

Physical Network Security Management is being able to link physically vulnerable business assets with network security controls for all business processes to function securely and effectively.  We can provide a comprehensive Physical Network Security Assessment with your staff to help identify your most critical business assets that are physically vulnerable to attack.  Working together we will put in place the proper physical controls and then develop a management strategy to ensure continued monitoring of identified assets.

Mitigation Management

Mitigation Analysis is how an organization incorporates Vulnerability Management and Analysis into a secure solution based on mission requirements.  Identifying and managing vulnerabilities is not enough, you have to go one step further — manage the mitigation process that follows.  We can help design and implement a Mitigation Management Plan to secure business assets by first creating predefined protocols used to make decisions on how your business will patch vulnerabilities focusing on what is most important to the mission.  Smart planning and professional implementation of the mitigation process will define how you operate top priority business assets securely.

Incident Response Team Management

Incident Response Team Management is a comprehensive and collaborative effort between your staff and our consultants to identify, create, implement, and maintain a group of people responsible for handling computer related incidents. Many vendors and contractors will just give you a how-to guide to create an Incident Response Team, but we want to see you succeed.  So our commitment is to stand by your side and be your professional advisor throughout the whole process.

Contact us here to set up a free consultation.