Orthus have extensive experience in designing secure architectures and in reviewing and improving existing infrastructure deployments using formal frameworks – including the Zachman Framework and SABSA® – as reference standards.

Design Services ensure that security is built-in during the systems design phase rather than added on after implementation. Addressing security early reduces cost and complexity significantly. Design and Review services ensure that information systems security does not act in isolation from business process.

Orthus Security Architects will understand the organisational structure of the business, the information architecture, applications, and network environments (both wired, wireless and mobile) and ensure that complex multi-vendor security infrastructures are optimised and configured to meet business objectives.

The services can be instrumental in establishing an enterprise-wide security architecture reducing the tactical acquisition and implementation of sometimes very different information security solutions often on a per-project basis.

Standardisation brings significant benefits – such as an assurance that solutions are scalable, will integrate within the current infrastructure and be more adaptable to meet changing business needs, enabling new initiatives. Operational and Administration costs – contributing significantly to the total cost of ownership – are minimised.

Orthus have designed and reviewed solutions in the following areas:

• Perimeter security (firewalls and VPNs)
• Load balancing, QoS and attack mitigation
• Content security (including secure email systems)
• Intrusion Detection and Prevention (IDP)
• Authentication solutions
• Identity and access management
• Encryption (file, disk and session based)
• Network Admission Control (NAC)
• Application security
• PKI and digital certificate applications
• OS and Database security
• Wireless (WiFi, Bluetooth, GPRS, UMTS, 4G)
• VoIP security
• Data and Intellectual Property leakage
• End-point security
• Forensics tools
• Security configuration / patch management
• Secure storage
• Vulnerability management
• Enterprise security management /SIM / SIEM