IT security is paramount to business. It is understood by most organizations that security is important, but the true risks to unsecured systems is often overlooked or misunderstood. The tragedy is that the security dangers are very real. However, there's been so much hysteria that anyone with any purchasing responsibility, recently, is probably confused by now and paralyzed by indecision.

Whatever your systems and technologies, we can audit, assess and remedy your organization’s current IT security vulnerabilities and potential future vulnerabilities. We will analyze to the minute level, if required, giving you a true picture of how secure you are from your internal and external threats.

The internal threats to business are typically the largest and most clear - and present dangers to organizations. Many service providers ignore this threat, and the customer ends up unaware of the danger until it's too late, often not being aware that a breach has even happened at all.

ZYAN’s security products and services provide the following benefits:

•		Help to prevent downtime from external threats, such as worm or denial-of-service attacks, allowing you to optimize your network's performance effectively.
•		Defend your network from internal threats, through control and audit.
•		Help to maintain your customer relationships, by ensuring that your on-line and mission-critical services are always available to them.
•		Allow you to protect sensitive business-critical data, such as confidential, credit card and personal information/data.
•		Simplify the management of your network security, even enabling you to selectively outsource the secure hosting and proactive monitoring of your network.
•		Help to maintain compliance with your internal policies, eg filters can be set so that HR departments can access a particular site, but manufacturing cannot.
•		Protect your network investment, by creating a solid platform which can integrate with both your current and future technologies.
Employee Internet Access
Internet access is a key resource for your organization, but it can also be a key vulnerability point. Inappropriate employee behavior can expose your network to security threats and legal/regulatory liability, as well as impairing both productivity and system performance. To protect your business integrity, our content filtering products can monitor and detect policy violations across the full spectrum of Web-based content: IM, P2P, streaming media, file downloads and Web-based e-mail. A recent report suggests that employees spend more than 200 hours a year surfing non-work-related Web sites. Furthermore, not only do employees spend almost 50 per cent of their browsing activity on personal Web sites, but also an astonishing three-quarters of all pornography, illegal software and music downloads and other non-business-related material is downloaded during work hours. Some key benefits of content-filtering, include:
•		Control unwanted content on your network through content-filtering.
•		Reduce recreational Internet surfing and increase employees’ productivity.
•		Secure your network from Web-based threats.
•		Limit the legal liability associated with pornographic or illegal file downloads.
•		Manage Internet traffic to optimize network bandwidth.
ZYAN can work with you to monitor network use and abuse actively, anywhere in your organization. Our solutions provide unequalled protection from inbound and outbound malicious content, including spyware, adware, phishing and viruses, as well as catching inappropriate Web usage, including streaming media, file downloads, pornography and copyright violations. Content Filtering is not about enforcing a big-brother culture, it's about protecting your valuable IT assets.
Patch Management
"Over 90% of security exploits are carried out through vulnerabilities for which there are known patches." Source: Gartner Group ZYAN takes patch management seriously and can ensure that you are as up to date as possible on virtually any system and remain protected, no matter what changes occur in your environment. It's a fact that a major risk to business security comes through unpatched software, be it the operating system itself or the software installed on it. Patch management plays a major part in your defense against internal and external threats to business. An effective patch-management strategy and solutions allow you to manage security threats proactively by automating the collection, analysis and delivery of security patches throughout the enterprise. Automating this time-consuming process can significantly decrease the costs involved in securing an organisation from worms, viruses and other malicious threats. In order to be truly effective, patch management must be consistently and continuously applied throughout the organisation, according to a well-defined process. The unfortunate reality about software in our complex world is that, even if a patch is correctly applied today, the same vulnerability may need to be readdressed tomorrow. The actual patch-management strategy is as important as the physical application of the security updates to your systems. ZYAN ensures that your strategy slots into the operations of your business and that you have a streamlined and measured approach to the problems associated with remaining secure from further software exploits.
Spam Management
Spam e-mail is a pain and detrimental to your organization’s productivity. Spam grows by the day and the threat grows with it, be it simply loss of productivity or (more importantly) the security implications which it brings. Spam brings a whole host of security concerns, owing to the potential exploitation of your staff or systems, be it through spyware, dangerous attachments, and phishing or plain hoaxes. ZYAN can protect you from all of the risks associated with spam e-mail through effective spam management. In a matter of hours, you can be back in control of your e-mail systems, allowing for increases in productivity and a secured e-mail system.
End Point Security
ZYAN specializes in providing endpoint security systems which deliver total protection to the roaming user or the desktop. If implemented correctly, endpoint security can deliver ultimate security to your network infrastructure. Endpoint security is essential for protecting your internal and roaming users from risks to your client and company security, also stopping the growing threat of zero-day exploits. Stopping known worm or hacker attacks is something which many security products, including antivirus software and firewalls, can do these days and have done for years, but how would they recognize and block a new and unknown attack? Since zero-day attacks are generally unknown to the public, it is difficult to defend against them. Zero-day attacks are often effective against secure networks and can remain undetected, even after they are launched. ZYAN’s endpoint and zero-day protection systems will protect your organization against zero-day threats, as well as the usual hacker, virus and worm-based threats.
So, how does it work? Endpoint security systems typically load an agent to the guest system to look for potential malware. This agent detects and disables spyware, keystroke loggers, Trojan horses, diallers and other unauthorised processes which transmit confidential information outside of the enterprise or lone laptop. It also checks for compliance with basic security policies, such as updated antivirus and software patches, before a connection is allowed. Users of compromised or out-of-compliance systems are prevented from logging in. Then they can be notified of the problems and instructed on how to take remedial action. Internet Vulnerability Assessment
The Challenge
The Internet poses many risks to business. The risk of external hackers, worms or bots entering your network or causing a systems outage (through a newly exploited security hole, system misconfiguration or fault) remains clear and present. These vulnerabilities may lie in areas such as your firewall, Web servers, mail servers, Windows, Unix, Linux and a whole host of other categories. It is a common myth that a firewall will protect an organization from security exploits. This is unfortunately false, in the vast majority of cases. If your systems are open to an exploit, then, at some point, the likelihood is that they will be exploited.
The ZYAN Solution
The ZYAN Internet Vulnerability Assessment (IVA) goes a long way in ensuring that security vulnerabilities in your Internet-facing systems and services do not go unchecked. The IVA service is an IT security audit performed by ZYAN to check your systems and services against different security risks, with more checks being added daily to ensure that the most recent and critical vulnerabilities are tested for. If a known vulnerability exists on your system, you can be comfortable knowing that the IVA service will detect it. If vulnerability is found, a report is generated by ZYAN , detailing the vulnerability, its severity and a resolution for the issue. You are then in a position to ask ZYAN or your own IT functions to act. The classic IT and network security audit is an invaluable tool for customers, allowing them to get their systems together to protect from the majority and more dangerous internal and external threats. As part of a comprehensive assessment of your overall network risk, it's important to assess not only the physical and technological protections you implement, but also how vulnerable your organization may be from your employees' Internet activities and the browsing habits on your internal network. The ZYAN employee Internet risk assessment audit uses monitoring and reporting functions to show potential and current employee-centric vulnerabilities. This type of assessment complements the ZYAN traditional security audit service, by showing where internal network security issues can occur - or where they are already occurring! ZYAN compares your security perceptions with actual data gathered directly from your network. A thorough report helps you to understand any difference between what you feel your risk level to be and that indicated by actual network data. Including the output in an overall security assessment increases the value, as the data is real, collected typically over a two-week period. The ZYAN employee Internet risk assessment audit:
•		Instant representation of your Internet usage behaviour - providing you with a high-level view of your organisation’s Internet activity.
•		Identify the percentage of clients on your network, infected with spyware.
•		See where you could be open to legal liability issues.
•		Understand and identify the dangerous areas on the Internet which your employees and PCs are visiting.
•		View the amount of bandwidth lost through non-business-related Internet activity.
•		View the amount of productivity lost through employees using the Internet for non-business-related activities.
•		Be able to make an informed decision on how to deploy Internet usage controls - often, an organization will be unsure what Web pages to block or what levels of control to implement. This assessment will provide you with clear areas to address.
Security Audit
ZYAN can undertake an IT security audit for your whole network and system infrastructure - as an evaluation of your current security status. This involves a measured, structure and thorough approach to security auditing, including measurement of your technical, physical and administrative defences. Securing your information assets requires more than just a firewall and some internal password policies. Organisations which value their data should consider much more than just the technical solution to the risks posed to their technical infrastructure. Security is not really a technical problem - it is a management and process problem which could require a technical solution, but, a large amount of the time, a physical or administrative solution is appropriate. ZYAN 's security consultants will assess several factors in your business, as well as your IT systems and infrastructure status, such as security processes, security technologies and management-information systems. We will then analyze our information, produce a security risk assessment and present it in a way which gives you a clear view of your security status, no matter what your technical level. ZYAN can then progress the IT security audit through to a remediation process, to help you to lock the windows and bolt the doors on your environment, to give you peace of mind in a secure operating environment.