CISSP® is a globally Recognized Expertise in the Field of Information Security. Our list of expertise include CISSP® certified engineers, one of today's most visible professions. It is the credential for professionals who develop policies and procedures in information security. A CISSP® is an information assurance professional who defines the architecture, design, management and/or controls that assure the security of business environments. The vast breadth of knowledge and the experience it takes to pass the exam is what sets the CISSP® apart. The CISSP® was the first credential in the field of information security to meet the stringent requirements of ISO/IEC Standard 17024. CISSP® certification is not only an objective measure of excellence, but a also globally recognized standard of achievement.

CISSP Certified Security Expertise for Small Business IT Systems

infoGlaze can provide access to security experts who have earned CISSP certification. CISSP certification denotes expertise with an international standard for information security. American National Standards Institute has awarded the CISSP credential formal recognition in the area of information security under ISO/IEC 17024. This is the first example where an information technology credential has been awarded ANSI recognition. CISSP is also approved by the U.S. Department of Defense (DoD) in their Information Assurance Technical and IAM disciplines. CISSP has also been accepted as a standard for the U.S. National Security Agency's Information Systems Security Engineering Professional (ISSEP) program to safeguard the NII.

infoGlaze can provide a CISSP-certified consultant to help your company in a broad range of security areas including:

• Security Management Practices
• Security Infrastructure and Paradigms
• Access Control Solutions and Processes
• Applications Development Security
• Secure Operations
• Site Security
• Cryptography
• Telecommunications, LAN and Internet Security
• Disaster Recovery Planning
• Law, Investigation and Ethics

• Security Administration Procedures
  Security management involves the determination of an organization's high-value data and the creation, documentation, and implementation of policies, procedures, standards. Administration tools such as information classification and threat assessment can be used to identify potential threats, categorize valuable data, and rate security vulnerabilities so that effective measures can be implemented.
• Security Infrastructure and Paradigms
  This involves the concepts, structures, and standards followed to build, monitor, and secure OS platforms, equipment, infrastructure, and application software plus the tools used to police different levels of availability, consistency, and privacy.
• Access Control Solutions and Processes
  Access controls are a collection of technologies that work cohesively to build a security architecture to guard the high-value data of the IT network.
• Applications Development Security
  This covers the key security concepts related to application development. Software development security defines the environment where software is planned and developed and elucidates the critical part software plays in providing information system protection.
• Secure Operations
  This has to do with identifying the management of hardware, media, and the operators and managers with access privileges to any of these assets. Audit and monitoring are the tools and techniques that permit the identification of security-relevant events and consequent actions to identify the key factors and report the pertinent data to the designated individual, team, or mechanism.
• Site Security
  Site security addresses security mechanisms for the whole physical facility, from the outside perimeter to the desk, including all of the IT network resources.
• Data Encryption
  Data Encryption entails the concepts, means, and methods of disguising information to ensure its integrity, confidentiality, and authenticity.
• Telecommunications, LAN and WAN Security
  This area concerns:
  • Network Infrastructure
  • Transmission methods
  • Transport formats
  • Security techniques used to provide availability, integrity, and privacy
  • Verification for traffic over private and public networks and media.
• Business Continuity Planning
  The Business Continuity Plan (BCP) addresses the preservation and recovery of commercial activity after outages.
• Law, Investigation and Ethics
  This concerns:
  • Computer crime regulations
  • The measures taken and technologies used to solve computer crime activity