• Security

Security

S&T has a team of experienced and competent experts who have been building secure IT infrastructure for our clients for years. Long-standing practice, cooperation with numerous – frequently competing – vendors, and in-depth knowledge of the market guarantee that the S&T partners always receive the best solutions possible. This is the only way to ensure global support for effective management of security systems which operate within a heterogeneous IT environment.

The method of building IT security systems is based on analysis of the transaction and business model of a company or an institution, and subsequent comparison of the quality of IT security to the level of importance of specific elements in an organization from the perspective of its continued operation.

According to S&T experts, Polish companies and institutions have already acknowledged the importance of IT security. They understand the need for protecting their IT systems against virus attacks, interception and replacement of data, gaining unauthorized access to a company's IT resources and other external threats.

The knowledge of internal threats is also becoming increasingly common among managers; these can result from employees and people associated with the company gaining unauthorized access to the system. Employees often unknowingly facilitate network hacking due to insufficient caution, recklessness, or through excessively broad and unfounded IT system access privileges.

Therefore, many companies and institutions decide to outsource to external experts, like S&T, all or selected functions concerning security of their IT systems.
Proper IT system security management covers both strategic and operational aspects.
The strategic activities related to IT security include:

• security audit,
• development of a security strategy,
• description and implementation of a security procedure,
• preparation of a technological protection design,
• project-based security planning,
• implementation of a company-wide security policy.

The operational activities concerning IT system security include:

• building the awareness of possible threats and methods of preventing them among all of the users of an IT system,
• development of a detailed IT security programme, including detailed recommendations addressed to employees and computer users in a company or an institution,
• making the key security-enforcing solutions classified, which makes it possible to avoid potential dangers,
• installation of firewalls and other protection systems, and constant monitoring of these solutions within the entire corporate network, the intranet and virtual private network (VPN),
• continuous monitoring of network traffic, logging events in order to detect break-in attempts and prevent the results of such attempts.