SMALL BUSINESS SHOWCASE NETWORK SECURITY SERVICES LLC - PowerPoint PPT Presentation

• Small Business Size: SBA Certified 8(a), HUBZone, WO, SDB
• Niche Areas: Computer Forensics & Managed Security
• IRS/Treasury Contracts:
• Subcontractor on IRS MITS Cyber Security, Office of the ACIO
• Prime contractor on IRS Cyber Security Training, Electronic Crimes Unit
• Largest award: $415,000
• Largest Company Award:
• Amount: Incrementally funded; currently at $415,000
• Customer: Govt: SPAWAR Charleston. Prime: Honeywell Technology Solutions, Inc.

• SBA Certified 8(a) and HUBZone, Woman-Owned small business
• GSA Schedule 70 Prime Contractor
• Seaport-E Prime Contractor
• Provider of highest level of IT security solutions

• Security Team’s Qualifications
• Backgrounds in:
• Law Enforcement/Military Intelligence
• Federal Agencies
• Prestigious Commercial Businesses
• High levels of education & certifications

• Law Enforcement Officer (19 years experience)
• Detective
• Computer Crime Investigations
• Commercial Field
• DCITP, Lead Instructor for Network Investigations & Intrusions
• Ernst & Young, Director of Incident Response, National Forensics Lab
• Fiderus Inc., Director of Incident Response & Penetration Testing

• Information Assurance Services
• Managed Enterprise Security Services
• Computer Forensics
• Network Investigations
• Computer Forensics Training

• Information Assurance Services
• Certification and Accreditation
• Risk & Vulnerability Assessments
• Disaster Recovery and Policy Development
• Managed Security Services
• Firewalls/Routers
• IDS/IPS
• Incident Response
• Computer Forensic Investigative Services
• Computer Crime Investigative Training

Information Assurance

• Information Assurance (IA)
• Certification & Accreditation
• Vulnerability Assessments
• Penetration Testing
• Application Testing

• The Federal Information Security Management Act (FISMA)
• Compliance with FISMA requires expert security analysis and evaluation skills and a thorough understanding of the FISMA requirements

• NSS Security Experts assist and guide in the compliance of efforts for the following standards:
• FISMA
• NIST 800 series
• FIPS 199,200
• DITSCAP/DIACAP
• NIACAP
• HIPAA
• ST&E Testing of the above standards

• Life Cycle Certification Support
• Definition
• Verification
• Validation
• Post-Accreditation
• Certification Audit Support

Checks for known vulnerabilities

Work closely with customer to identify scope and depth of scanning

Generally, systems are checked for known exploits and vulnerabilities

Work with customer to mitigate and mediate identified risks

Assist in solution development and implementation

In depth probing and testing

Exploit unknown or unpublished vulnerabilities

Requires more time and higher skilled people

Achilles heel of service-oriented architecture

Applications are key to leveraging benefits of information systems

Create the greatest risk

Extensive code

Chance of insecure or exploitable code being created

Managed Enterprise Security Services

Firewalls

Routers

Intrusion Detection Systems

Intrusion Prevention Systems

Incident Response

• Monitoring & Compliance
• Log analysis
• Configuration review and assessment
• Configuration updates and adjustments
• Rule testing and evaluation

• Manage and monitor IPS/IDS
• Monitor network traffic for:
• Hostile network activity
• Ex-fill of sensitive information
• Policy enforcement and violation
• PII disclosure
• Plain Text
• Respond to alerts (IR)

Computer Forensics

Mobile Forensics

Network Forensics

Intrusion Investigations

Incident Response

Wiretaps

Packet analysis

Server data acquisition

Live data collection

Data validation

21

Computer Forensics

Linux Forensics

Mobile Forensics

Network Forensics

Intrusion Investigations

Internet Investigations

Wire Taps

DCITP- Defense Computer Investigations Training Program for DoD

Department of State

George Washington University

Internal Revenue Service

Regional Computer Forensics Group

Federal Bureau of Investigations

SOCOM

24

• SPAWAR Systems Center Charleston
• Performing ST&E
• Testing:
• FISMA Standards
• NIST 800-53, 800-53A
• FIPS 199, 200 
• Technology: Cisco, Unix, Microsoft, MSSQL 2000, MSSQL 2005, and Oracle 10.1(g)

• SPAWAR - Navy Medicine Enterprise Security Operations Center
• Router and Firewall security
• Management and monitoring support
• Policy compliance with SOP
• Develop and document operating policies and procedures

• IRS
• USDA
• Department of Navy
• HQ, FIRST U.S. ARMY
• SAIC
• Commercial Banks
• Unions

• FBI
• OIG Philadelphia
• Philadelphia PD IA
• Large Prime Contractors
• Law Firms & Private Investigative Firms
• Commercial Banks
• Commercial Businesses

29

CCE

EnCE

GIAC (SANS)

MCSE

CISSP

CCNA

CCSP

Security+

CCNP + Security

MA Sociology/Criminology

MS Information Systems

• Certified Expert Computer Forensics
• Certified Expert Mobile Forensics
• Certified Witness Edged Weapons

32

• We have had outstanding performance reviews from our customers
• We place appropriately skilled, technically proficient security engineers
• We have several teaming opportunities on large, upcoming projects

• Support C&A efforts for Marine Corps
• Increase support on Navy Medicine Enterprise Security Operations Center
• Intrusion Prevention/Detection
• Incident Response
• Manage Computer Forensics Lab
• Provide computer forensic and incident response support to government SOC/NOC

• Achieve prime contractor status
• Start small and grow
• Stay up-to-date on certifications and education
• Continue to provide our customers with

Quality of Service and Customer Satisfaction

• Network Security is in our name & is what we do
• Skilled and Certified Security Engineers
• Strong Past Performance & Notable Responsiveness

VA office: 2106 Harbor Drive, Greenbackville, VA 23356

SC office:1156 Bowman Rd, #200, Mt. Pleasant, SC 29464

Phone: 703-319-0411 or 843-416-1196

Fax: 866-670-1961

President: (Ms) Alexei Haughom

Email: alex@netsec.cc

Website: www.network-securityservices.com