|
|
|
|
|
|
|
|
Security Audits
Our Security Audits are based on industry-accepted standards such as BS7799, CoBIT, and legal requirements specific to the industry and country.
The auditing approach is designed to cover all aspects of security including People, Processes and Technology.
Our consultants are certified as CISSP, CISA, ISO 27001 (BS 7799), and GCIA. More importantly, they possess possibly the widest array of technical expertise (see 'Technical Expertise').
Previous clients for whom we've conducted security
audits include Northwestern Mutual, Western Railways, Prudential ICICI, CapGemini, Reliance Asset Management and others. See our complete client list.
Previous experience in this segment includes application security assessments for CRM and ERP software of large manufacturing and financial firms, e-commerce applications for some of the largest online stores, and client-based encryption software among others. Our skills in this area are demonstrated by the bugs we find in mission critical software from vendors such as Microsoft, Oracle, Macromedia and Nortel. Read our list of advisories here.
|
|
|
Technical Expertise
| Area |
Technologies |
|   Operating Systems   |
  Windows NT, 2000, 2003, Linux, Sun Solaris, HP-UX, IBM AIX, Open VMS, Novell Netware, IBM OS/2   |
|   Databases   |
  Oracle, SQL Server, IBM DB2, MySQL, PostgreSQL, Sybase |
|   Firewalls   |
  Cisco PIX, Checkpoint, Netscreen, Watchguard   |
  Intrusion Detection Systems |
  ISS RealSecure, Cisco Secure, Dragon IDS, Fortinet, Snort |
|   Network elements |
  Cisco, Nortel, IBM Routers and Managed Switches |
|   Code Reviews |
  C/C++, Visual C++, Java, PHP, ASP, ASP.NET, Perl |
|   Web Servers |
  IIS, Apache, Netscape Enterprise |
|   Messaging Servers |
  Microsoft Exchange, Sendmail, Qmail, Lotus Domino |
|   Others |
  SAP, Active Directory, ISA Proxy, Squid Proxy |
|
|
|
|
Quick Links
Resources
SAP R/3 Approach Paper: SAP R/3 Security Assessment Framework.
NII Tools: Often during penetration testing exercises we come across situations where available tools may not suffice.
To know more about our security audit or individual services' methodology, approach, deliverables, and pricing, email us at services@niiconsulting.com or call us at (91)-22-28392628
|
|
|