Covetrix Comprehensive Security Audit
With Federal regulations and the Graham Leach Bliley Act always present, organizations must ensure that the privacy of client information and the integrity of networked systems stay intact.

 

Covetrix Security Audits  allow your organization to meet Federal security regulations which address prevention, detection, and response.  Using innovative security testing techniques, Covetrix is able to analyze more items on your network than any other firm in the industry.

Our Security Team uses proprietary and commercially distributed vulnerability analysis tools to expose and help secure your information resources. Engineers develop a customized test plan for every customer on an individual basis, assembling the right set of software and tools to rigorously evaluate each company's unique information system environment. Scripts and processes developed internally by Covetrix security experts add the finishing touches, providing you with the most complete and thorough Security Audit available on today's market.

Covetrix Security Audits Include:

  1. A review of your enterprise network architecture to determine how effectively it isolates untrusted networks from gaining access to internal networks and confidential information.
  2. Analysis of internal network design to determine how effectively internal users are Isolated based on their role within the organization.
  3. Security design review focusing on internal network security devices (such as routers, remote access servers, bridges, firewalls, and email and web servers) to locate potential security vulnerabilities. Associated vulnerabilities may be due to inappropriate device placement, operating system holes, and improper device configuration.
  4. A series of tests designed to gain unauthorized access to portions of your trusted internal network by posing as a malicious hacker or a disgruntled employee penetrating your perimeter defenses.
  5. In-depth review of the financial institutions security management controls including security policies, organization, personnel, asset classification and control, physical security, access control, network and computer management, security system development and maintenance, and Federal Regulatory compliance.
  6. A physical security review of your organization's networked resources, verifying that access to critical devices is restricted to authorized personnel only.
  7. Detailed report describing the strengths and weaknesses found during the assessment with recommendations for short and long term security improvements.

Please ask a member of our sales staff about other security solutions by Covetrix!

For more information or a free consultation on Bank Secure by Covetrix, please contact a member of our sales staff at 1-877-780-1132 or email us at sales@covetrix.com.

Security Testing

 

 

3rd Party Audit of:  Audit Company?

Information Security Program 

Covetrix

 IT General Controls Review

Covetrix

 Vulnerability Testing

Covetrix

 Penetration Testing

Covetrix

Table 1. FDIC Rules and Regulations Part 364 Appendix B Section III (C)(3) and (F); FFIEC IT Examination Handbook, Audit Booklet; FIL-12-1999 Uniform Rating System for Information Technology

 

 

Security Audit Brochure
PDFSecurity Audit Brochure