Mission Statement
To be known, trusted, and respected as a market leader assisting proactive, responsible organizations to achieve their business goals in the most secure, effective, and efficient manner possible. Through our ongoing commitment to research and education, we ensure the creation and provision of innovative information assurance solutions to our clients.
Our Logo
At Seccuris we are committed to developing and providing effective, detailed, and complete information assurance solutions to answer the business and technical challenges of our clients. This commitment is core to our people and our organization; so much so, that it is established in the logo that represents us.
The Five Components of Information Security Architecture
Security Organization and Infrastructure
Key roles and responsibilities must be defined for personnel within the organization. No matter how large or small a company is, role definition is paramount to effective information assurance initiatives and the ongoing security of the organization. In times of crisis, everyone must know their role to maximize the available resources and to minimize organizational loss. Whether your focus is enhancing corporate governance to include effective information assurance practices, or your requirement is the improvement of daily security incident handling processes, Seccuris will help you to achieve success in your efforts.
In today’s effective organizations, the line between technology infrastructure and business infrastructure will blur from time-to-time. Determining whether security controls are essential for your business, or are simply a technical diversion, can be a difficult task; often you will be faced with missing information or unknown facts preventing you from making the most appropriate decision. Seccuris will provide you with an unsurpassed level of knowledge and detail, giving you confidence in the technology decisions you make.
Security Policies, Standards, and Procedures
Effective information security is not "common sense" nor does it simply occur spontaneously within an organization. Policies, standards, and procedures must be established, endorsed by management, and adhered to by everyone in, and associated with the company. Creating clear, relevant, and enforceable policy allows the organization to not only show due diligence, meet compliance requirements, and appease management; it allows the entire business to operate in a reliable and secure manner with both daily events and emergency situations. Seccuris facilitates the creation of policy that truly matches the risk posture, language, and governance model of your organization.
Security Baselines and Risk Assessments
Strategy is a fundamental component of any successful, long-term business initiative. For your organization to successfully manage information security, strategy will be a key factor. Baselines must identify strengths and weaknesses in the organization and ongoing risk assessments provide clear and concise information upon to strategize, plan, and implement sound decisions ensuring an effective balance of security.
Seccuris provides your organization with baseline and ongoing risk assessment services that are focused on the immediate needs of your organization while offering strategic, forward-looking information for your ongoing planning.
Security Awareness & Training Programs
It has been said that no one wants security; they want the benefits security brings. It is the job of security awareness programs to educate employees regarding the risks and consequences of improper use of information resources, technology, social engineering threats, and the impact that they have on the organization. Education must be a constant element of your information security program. Whether focused on educating the masses, or giving chief employees expert information security knowledge, Seccuris provides you with the tools and resources required to implement valuable education programs and initiatives.
Compliance
Some of the best solutions and controls are rendered worthless when they are not utilized properly. By monitoring to ensure solutions are being used and policies are being upheld, worthwhile information security architecture can be implemented. Seccuris assists you by creating and implementing ongoing compliance initiatives ensuring due diligence, protecting your investments, and allowing you to build for the future.
The Eight Layer Inter-Networking Model
The seven layer, Open Systems Interconnection Basic Reference Model (OSI model) provides a standardized image to comprehend how an inter-network operates, and acts as a framework to build and implement any number of different networking components. The layers are:
- Application
- Presentation
- Session
- Transport
- Network
- Data Link
- Physical
The three lower layers, often referred to as the Media layers, provide the guidelines for how two end stations establish connections with each other in order to exchange data. The top four layers, often referred to as the Host layers, define how the applications on the end stations communicate with each other and with the users.
When creating or auditing any information system, application or device, security at every layer should be taken into account. Due to its technical nature, the OSI model leaves out one of the most important elements that must be identified and examined to ensure truly effective security.
The missing layer is the user. This additional element completes the Seccuris perspective of how information security should be assessed. Networks and communication devices can be designed very well with the seven layer OSI model, but a complete business-aligned security solution must take into account the human elements that affect all aspects. With the user layer sitting on top of the seven-layered OSI model, the effect of the user on the entire inter-networking process can be assessed and accounted for.
- User
- Application
- Presentation
- Session
- Transport
- Network
- Data Link
- Physical
Proper information security is achieved through the development, implementation, and maintenance of well-rounded information security architecture. No one component will give you an entire solution. Seccuris strives to deliver solutions that integrate seamlessly into client businesses and to identify each component of proper information security architecture.
