Security services

Consider the following factors when assessing your security requirements:

Supported services

• Access Services
• Hosting Services
• Network Services

Threat Level

• Previous attacks
• Current threat level
• Current vulnerabilities
• Predicted threat level
• Security triggers

Staff

• Vetting procedures
• Access levels
• Contractual terms
• Initial passwords

Connections

• Connection types
• Public
• Leased line
• Wireless
• Fibre-optic
• Connection vulnerabilities
• WEP
• IPSec
• Encryption

Physical Security

• Equipment locations and access
• Access policies

Data Access

• Access policy
• Dial-in Access
• Password policies
• Virtual Private Networking (VPN)
• Telnet/Terminal Services
• Remote control/Remote desktop

Viruses

• Type
• Propagation method
• Preventing
• Coping with attack
• Attachment policies

Security Advisories

• Vulnerabilities
• Patching

Availability and Redundancy

• Availability level
• Storage redundancy
• RAID type
• Configuration
• Geographical redundancy

Backup and Restore

• Frequency of backup
• Location of backup media
• Time to restore

Contractual Implications

• Contract length
• Penalty clauses