Welcome Guest. | Log In| Register | Membership Benefits
News

June 12, 2000

Printer ready
Printer ready

Security Portal Aims To Deter Enterprise Breaches

Esecurityonline.com from ernst & Young Helps companies find vulnerabilities

By George V. Hulme

Related links:

  • Enterprise Management/Security Resource Center

  • And from our sister publications:

  • InternetWeek IT Pros Focus On Security Skills

  • InternetWeek Security Strategies--A Welcome Intrusion (5/29/00)

  • TechEncyclopedia
    Need a definition of a technology term? Look it up here:


    Send Us Your Feedback
    Many security professionals lack the time to find and troubleshoot all the vulnerabilities on their networks that could leave a door open to malicious crackers. So they prioritize security projects, tackling the large holes first and hoping the bad guys won't notice the more clandestine points of entry. It's a risk that they shouldn't have to take, and Ernst & Young International says it can help them reduce the threat.

    With the launch this week of its security portal, eSecurityOnline.com, the consulting firm says it's offering businesses an efficient way to identify and eliminate the breaches most likely to threaten their networks.

    Tony Spinelli, an eSecurityOnline .com VP, says the portal has records of more than 2,000 vulnerabilities, enabling clients to create custom asset profiles, queries, and reports covering 40 operating systems and numerous common applications, devices, and databases found in business environments. Clients complete a security assessment profile, and eSecurityOnline gives them "the tools to ensure that their information security policy is constantly updated and enforced," Spinelli says.

    The service's ability to send custom vulnerability information is a time-saver for DST Systems Inc., a Kansas City, Mo., computer software and services company. Before the company became a beta site for eSecurityOnline, DST's staff had to scour security newsgroups and mailing lists and rely on vendor updates to keep track of potential problems in a network of several hundred Windows NT and Unix servers and about 9,000 PCs. "Finding vulnerabilities and determining if they were relevant was a real drain," says Debbie Briegel, DST's assistant manager of data security.

    Ernst & Young is the first of the Big Five to provide this level of outsourced security services, says John Pescatore, research director at Gartner Group. He says demand for such offerings will be fueled by companies' inability to find skilled security professionals.

    That's the case at Newmont Mining Corp. in Denver. "We're facing the lack of qualified personnel like everyone else," says Daniel Kesl, a senior network architect. "In the upcoming months, we're going to seriously consider these types of offerings to help us solve the problem." Annual pricing for eSecurityOnline starts at $5,000 per user.

    Back to This Week's Issue
    Send Us Your Feedback
    Top of the Page