INFORMATION SECURITY

Your Information has massive value and is at risk.

It is a critical business asset (imagine trying to run your business without it) and has sensitive and confidential relevance to individuals (personal identity details being a prime example). Unfortunately because it carries such high value it has become a very attractive commodity and powerful tool for the criminal fraternity. It is therefore vital that you look after it and keep it properly protected. The consequences of not doing so can lead to business or reputational damage, legal implications or personal sufferance.

Because most modern organisations use ICT systems to hold, process and transmit information and because generally most ICT systems are relatively easy to break into they have become the target of choice for the modern day criminal. More worryingly it is a fact that most ICT attacks go undetected or unresolved which adds attraction to “e-criminals” who unfortunately can be reasonably confident they won’t get caught.

Press reports have become commonplace referring to “e-crime”, “cyber-crime”, “on-line crime”, etc. These all mean the same thing and are about unauthorised access to ICT systems and networks by those with ill intent. It may not necessarily be data theft or corruption they intend although that is often a primary motivation; other reasons include examples such as bringing the system or business to a grinding halt through a denial of service attack or an intrusion by, or on behalf of a competitor or vengeful ex employee or customer.

In the THREATS area of the website we present a brief overview of the main areas of risk to your information assets.

IT and Information Security – how Meritec can help

Every business (and for that matter individual) is exposed to these risks and statistically it is almost certain that we will all experience an attack or attempted attack at some stage – so don’t be complacent.

Meritec provides a variety of IT security services to help you address the many risks to your IT systems and information, these include:-

• Security Testing – to evaluate existing IT security measures and provide recommended countermeasures to address any weaknesses.
• Secure Web Development and Web Hosting – combining our experience in security testing and web development we provide both a development capability and advice and guidance on secure development practices and requirements for secure hosting.
• Information Security Management and Business Continuity Planning – focusing on the preventative aspects of IT and Information Security, our consultancy team provide services to assist in formulating:-
  a) Information Security Management Systems (ISMS) – to ISO27001 standard. (Meritec’s own ISMS is accredited to ISO27001 standard).
  b) Business Continuity Plans - to BS25999 standard.

A brief overview of the Meritec IT and Information Security services is provided for your information, but for more detail, and to discuss your particular requirement please talk to us.

Why Meritec

Information security is obviously a very sensitive matter. It deals with your critical and sensitive business and personal information and in the case of testing services you are giving our consultants authority to access this information, trust in the supplier is therefore paramount. Meritec is attractive to clients in this regard because we have a long trading history, strong references and low staff turnover. All Meritec staff involved in the delivery of the security services are trustworthy permanent employees who are backed up by the professional reputation and solid experience of Meritec. Your contract is with Meritec not with an individual or contractor – this gives you greater security and improved cover.

Meritec is an Information Security consulting business wholly independent of any vendors or products. This enables us to provide wholly objective assistance and help customers to assemble information security solutions tailored to their needs using best of breed components.

We take great care in agreeing the details of all assignments in advance with the client and nothing is undertaken without prior agreement to scope, content, intended outcomes and cost. Our Security Testing Consultants are qualified to recognised Certified Ethical Hacking standards (CEH) and they build lasting relationships with clients consistent with the Meritec culture of working in partnership with our customers.

The Directors and Senior Management of Meritec maintain a close, hands-on involvement with clients and assignments, consequently our customers always have direct access to senior people should that be desirable or necessary – you do not have to endure lengthy chains of command to get to the top.

Please speak to us – we can help you. You can also or request download a free "Rough Guide" from here.