Depth and breadth

For the depth of experience we have developed software systems that have met extremely high reliability needs (Non-Stop and clustered architectures) together with X.400 message handling systems using kernel software and Transaction Processing middleware for high performance scalable systems.

This involved an in-depth understanding of software and systems together with all the networking layers. This has been complimented with n-tier system architecture work to develop security architectures for distributed high user systems. Different topologies have covered centralized networks as well as Extranet and Intranet IP architectures, together with legacy systems and leased lines. PKI security objectives and solutions have been devised for clients that both need their own Certification Authority and others whose needs can link with third party CAs.

Business areas

We have covered the following, which involve a variety of risk philosophies:

• Finance (international) - Information providers (international) - Media Telecommunications - Government (& Research) - Police and Utilities.

The scale of organisations covered is also wide ranging through:

• Tri-national projects - 2 man partnerships - FTSE100 - International finance organisations.

For larger client organisations the above choices have been synthesized and explained leading to approval by Management committees. This involves derivation of security policies, objectives and associated risk assessments appropriate to business drivers.

Security evaluation

Our staff helped form the first ITSEC licensed evaluation facility in the UK which independently evaluates security systems and products against internationally agreed criteria. Furthermore our principle helped in the DTI working groups that developed the latest Common Criteria standards as well as the only standard world-wide for security management: BS7799.