Global Services

Security Awareness Training

Our Security Awareness solutions are developed with one purpose in mind: "Provide Security Awareness solutions that are all encompassing and meaningful to every employee." Our team draws on years of information and physical security experience. Our training solutions are developed using our extensive knowledge of security standards including ISO/IEC 27001:2005, PCI-DSS, Sarbanes-Oxley, BS 25999, NIST, CIS, and numerous other government, industry, and organizational standards. Our work spans Home Security Awareness, Information Security Awareness, Business Continuity & Disaster Management Awareness, Awareness of Compliance and Regulations, and Privacy Awareness.

Our training solutions include e-Learning training modules and instructor lead classes. We also provide expert consultants who can help you build your Security Awareness program for you using our state of the art tools, and expertise.

Penetration Testing

OpenWave Security Penetration Tests provide you with an accurate method of evaluating the security of a single computer system or an entire IT infrastructure. Penetration Tests involve an advanced analysis of the target(s) involved, specifically designed to identify technology flaws or security holes within the target(s). Once those flaws are identified and confirmed a OpenWave will attempt to exploit those flaws to gain access to the affected target. Penetration Tests can be executed in the following ways, or in a combination of the following ways.

• Directed Penetration Testing is the act of executing a penetration test against targets which are identified by the client. This is the standard method of attack for penetration tests and enables the attacker to work within well defined boundaries. Normally clients provide all IP addresses which belong to the client.
• Blind Penetration Testing is the act of executing penetration tests against targets which are identified by the attacker. No target list is provided by the customer and the attacker is expected to identify his own targets. To ensure safety, the attacker will confirm any potential hazards with the client before attacks are launched.
• Stealth Penetration Testing is penetration testing which is specifically designed to avoid detection. This type of testing is ideal for companies who wish to test their Managed Security Service providers' response time, or perhaps their own Intrusion Detection Systems and incident response methodologies. In most cases, stealth attacks should be detected by properly installed and managed monitoring solutions.

What can Penetration Testing do for Your Business?

Using OpenWave to test your network via a Penetration Test will enable you to defend your network against attacks from malicious hackers. Our Team understands how to defend against the technologies that they employ to penetrate a network, the same technologies used by malicious hackers. At the conclusion of a Penetration Test the results are carefully explained and the methods for defending against future attacks are defined. OpenWave will also help clients implement the fixes required to defend their networks against attack.

Vulnerability Assessments

OpenWave’s Vulnerability Assessments identify security holes and vulnerabilities within an organization’s infrastructure. Unlike penetration tests, where the objective of the test is to compromise a system’s network, the purpose of a vulnerability assessment is to identify security holes and vulnerabilities without initiating the actual compromise.

OpenWave security professionals are able to quickly identify points of vulnerability within a client’s environment by using similar techniques used by hackers. Once adequate information is collected about the target’s infrastructure, OpenWave is able to accurately identify points of vulnerability.

At the conclusion of a vulnerability assessment, OpenWave produces actionable reports which enable our clients to determine how to eliminate the discovered vulnerabilities. Vulnerability Assessments are broken down into two areas:

• External Vulnerability Assessments
• Internal Vulnerability Assessments

Both Internal and External Vulnerability Assessments enable our clients to take a proactive approach to network security. They also significantly increase the overall reliability of an organization’s network infrastructures.

Incident Response

OpenWave’s incident handling and response experts can provide rapid emergency response to contain an incident, mitigate the threat and protect your assets. Emergency Response & Recovery services include:

• Incident Handling – OpenWave provides on-site or remote analysis, containment and response to an incident in progress to minimize its impact on your organization. Afterwards, OpenWave experts work with you and provide recommendations to prevent similar incidents.
• Forensic Investigation – Using a variety of professional tools, OpenWave can capture and analyze data stored on hard drives, mobile phones, PDAs, servers, virtual systems, removable media and other formats in a forensically sound fashion. This can be performed as part of handling an incident to fully understand the scope of a breach or disclosure.
• Incident Management – To support your organization’s response efforts, OpenWave can provide independent and objective advisory services based on evidence collected during incident handling activities to executives, legal counsel, public relations and other key stakeholders to help you manage the cost and impact of a security incident.
• Malicious Code Analysis – If your environment has been compromised by malicious code, OpenWave experts can reverse engineer the code to understand its full purpose and the impact it has on your business and data.
• Phishing Takedown – OpenWave’s security professionals are always available to respond to phishing attacks. Working with key anti-phishing, security organizations and ISPs, we can determine the location of the server hosting the phishing site and have it taken down. Our experts will also continue to monitor the phishing domain and take appropriate action should the phishing site be re-activated.