Information Security
Keeping data and information systems secure
From the development and management of complex information security processes, to
the mechanics of system security evaluations in our testing environment, GTI
Federal is committed to the protection of our clients’ data and information
systems. GTI’s Cyber Security Services (CSS) personnel have extensive experience
in the application of multi-disciplined security control measures that protect
and defend information and information systems by ensuring their availability,
integrity, authentication, confidentiality, and non-repudiation. This includes
providing for the restoration of information systems by incorporating
protection, detection, and reaction capabilities.
Information technology systems and the Internet have not only become
indispensable to the way business is done, they have become indispensable in our
everyday lives. From a business perspective, they empower organizations to
conduct e-commerce, provide better customer service, collaborate with partners,
and reduce communication costs while increasing communication capabilities, and
access information more quickly than ever before.
However, in the rush to increase the benefits of these IT resources, significant
risks have often been overlooked. For example, the engineering practices and
technology used by many system providers do not produce systems that are immune
to attack. Most network and system operators do not have access to the resources
and technical expertise to defend against attacks and minimize potential damage,
while continuing to ensure the undisturbed flow of information. Further,
security practices are often unorganized, underdeveloped, undocumented, and
poorly disseminated – providing for low adoption rates.
GTI Federal can help. Our CSS uses proven information security methodologies
predicated upon five essential competencies that are the hallmark of any
successful program designed to manage risk in a technical environment:
- Assessing security needs and capabilities;
- Developing a purposeful
security design or configuration that adheres to an architecture that maximizes
security services
- Implementing required management, operational, or technical controls and
safeguards
- Testing and verification
- Managing changes to an established baseline in a secure manner
The GTI Cyber Security program is based on the successful implementation and
integration of a set of processes that are intended to elevate the priority of
security, and encourage enterprise decision-makers to take the lead in
developing or augmenting security policies and programs. Effective application
of these processes will help ensure the total integration of cyber security
protection features, policies, and methodologies into all phases of the
Information System Development Life Cycle, from concept and planning through
engineering, to build and testing and operations/maintenance, and eventual
disposal.
