Download Security Audit Proposal

Example PTY LTD
Basic
Network and Security
Audit
Proposal
Provided by
www.talmansolutions.com.au
Basic Network & Security Audit Proposal
Confidential Document
Executive Summary
Purpose:
Basic network and security audit and recommend changes, should they be required.
A basic network and security audit is to be performed at Example PTY LTD to gain an
understanding of its current network layout and to review how network security is
currently being undertaken.
Talman Solutions’ Network Security Specialist will be at Example PTY LTD’s office for
one day to perform the network and security audit.
Our Network Security Specialist will create basic network documentation of Example
PTY LTD’s network. Areas and equipment that will be reviewed include:
•
•
•
Servers and network security devices
Network switches and equipment
Selected computers and staff members
Talman Solutions requests that staff members are made aware of an onsite visit by
our Network Security Specialist. Talman Solutions will also request the assistance of
Example PTY LTD’s current network administrator. If possible, Talman Solutions
would like that the network administrator be made available on the date of the onsite
visit.
Deliverables:
•
•
Recommendations
Printed Document and electronic copy of the recommendations
These deliverable documents should be properly secured as the recommendations
document may contain sensitive data or information.
The recommendations will offer basic solutions to any current security concerns that
may be identified. These recommendations are guides to assist Example PTY LTD in
securing their current network infrastructure.
Talman Solutions is pleased to be working towards creating a more secure and
reliable network at Example PTY LTD.
Kind Regards
________________________
Luis Catarino
Technical Business Development Manager
Talman Solutions
Basic Network & Security Audit Proposal
Proposal created for Example PTY LTD
Confidential Document
Page 2 of 5
Created by Talman Solutions – www.talmansolutions.com.au
About Talman Solutions
Talman Solutions started in 1976 servicing the primarily the wool industry. Talman
Solutions created the first Electronic Document Interface (EDI) network in 1985 for
its wool clients, and the industry.
Over the past 30 years, Talman Solutions has evolved into a company that no longer
only supports the wool industry (in which it has the lion share of the market) but
now creates business workflow solutions for medium to large businesses and
companies.
Talman Solutions service offerings also include technical services, consulting (both on
Information Technology infrastructure and application), and website creation just to
mention a few.
Talman Solutions employ over 30 staff members in 4 different business areas. These
4 business areas are:
• Technical Services and Consulting
…the whole process of the migrations ran
• Web interface solutions
smoothly from the planning stage through
to the implementation. The time-lines
• Traditional client/server applications
given were closely adhered to and there
• Client support
Talman Solutions is a unique company that
offers a dedicated client support structure
for any of its offerings. This gives the client
piece of mind knowing that Talman
Solutions not only created the customised
solution but we are also able to support the
solution.
was minimal downtime for all of our
systems ensuring that our users were not
inconvenienced during any part of the
process.
Now that the upgrades are complete we
have been able to see first hand the
increased
user
efficiency
that
the
upgrades have been able to provide our
company…
N. Stewart
Systems Supervisor
Australian Wool Exchange
Typically Talman Solutions clients consist of
companies that are concerned about business processes such as document handling
and processing. These companies realise that these inefficiencies are leading to lost
revenues or even loss of return customers.
Talman Solutions has been proud to assist many companies in many different
industries. Talman Solutions has been involved in the following industries:
• Education
Knox Grammar School
• Manufacturing
MISO
• Legal Services
Langes Lawyers
• IT Reseller
Ethan Group
• Automotive
G Brothers Mercedes
• Online Auctions
Australian Wool Exchange
• Microsoft conferences
OzFox
…the work completed so far is further indication of Talman’s understanding, flexibility,
enthusiasm and professionalism. I have no doubt that we will out-source other similar
projects in the future, and Talman will be our first choice to design solutions for our specific
problem areas.
G. Hughes
Director of Information Technology
Knox Grammar School
Basic Network & Security Audit Proposal
Proposal created for Example PTY LTD
Confidential Document
Page 3 of 5
Created by Talman Solutions – www.talmansolutions.com.au
Detailed Procedure
Below is a detailed outline of the basic network and security audit.
1. Accessing servers and network equipment
During this section, our Network Security Specialist will access servers,
network switches and any other network devices. This will exclude devices
such as printers. The process of network audit requires that technical details
are collected. These details will be entered into our data collection document.
This part of the process would take the most time to complete, as systems
are manually reviewed and documented. Items that will be investigated
during this section are:
•
•
•
•
•
•
Domain Controllers
Email Servers
Any other servers
Internet Service Provider (ISP) details
Network switches
Wireless Access points (should they exist)
2. Speaking with staff
During this section, we have a brief discussion with staff about their
expectations of security and how they view its relationship with functionality.
Often many companies implement security measures that overbear staff
members. These overbearing measures have an inverse effect where staff
will actually disable security to continue working effectively. This component
will be performed by the project manager assigned to the review.
3. Speak with Management to understand budget and expectation
requirements
Speaking with management is a key aspect to the whole process. This will
allow for Talman Solutions to correctly create recommendations. Having a
clear understanding of Example PTY LTD’s needs are paramount to the
success of implementing any security measures or changes.
Basic Network & Security Audit Proposal
Proposal created for Example PTY LTD
Confidential Document
Page 4 of 5
Created by Talman Solutions – www.talmansolutions.com.au
Detailed Procedure Cont…
4. Compiling data and create recommendations
During this section, Talman Solutions will combine information gathered
during the onsite visit into one document. Our security team will investigate
how implementations should be handled by Example PTY LTD so that minimal
disruptions and costs are added to improve security within their networking
environment.
5. Presentation of findings
Talman Solutions will once again visit Example PTY LTD to discuss the finding
and the recommendations put forward. Talman Solutions believe this part to
be a key aspect of successful implementation.
6. Follow up
Talman Solutions will organise a follow up time during the Presentation of
findings stage, where Talman Solutions will speak with the management team
of Example PTY LTD and see how they are managing the recommendations or
changes that may have been implemented.
Basic Network & Security Audit Proposal
Proposal created for Example PTY LTD
Confidential Document
Page 5 of 5
Created by Talman Solutions – www.talmansolutions.com.au