Security Consulting
We identify potential security exposures and get your organization
prepared to defend the next threatÌÌ Identify vulnerabilities withinyour security infrastructure andsoftwareÌÌ Develop policies, internal
controls and workflow to improveoverall security readinessÌÌ Resolve threats for clients

ÌÌ Recommend architecture anddesign changes needed to better
use the available infrastructureÌÌ Develop plan for necessary
preventive measuresÌÌ Verify accessibility protocols arein placeÌÌ Utilize penetration testing
techniques for deeper analysis ofyour security infrastructure

Sophos Professional Services can be used by your organization
to assess and resolve suspected security vulnerabilities withinyour IT infrastructure. Security Consulting addresses thebusiness and people aspects—policies, procedures, internal
controls and workflow—to make sure they align correctly withand meet the appropriate level of data protection.

What you getÌÌ Experienced consultants skilled in
the latest security techniquesÌÌ Customized security consulting
approach based on yourrequirements
ÌÌ Develop customized security
policies to address your needs andindustry best practices
ÌÌ Testing performed in accordancewith recognized professional
methodologies
ÌÌ Detailed report highlighting key
findings and recommendations

We complement your Sophos
technology with the best security
assessment, policies and controls
and recommendations
Comprehensive security, as IT professionals
know, is more than technology. It is also built
on people and policies that complement thesoftware. The Sophos Security Consulting teamcan craft the security policies and train yourpeople to carry it out. We are flexible; we canengage to help you with any aspect from threat
discovery and investigation, tactical—policy andworkflow—and strategic architecture and design
recommendations.
Identify the vulnerabilities We actively check the IT
infrastructure for known threats.
Deeper analysis We use intrusion simulations on different
attack scenarios to determine possible consequences.
Assess your overall security position Identify which
security gaps leave you open to specific threats, and clarify
their potential impact.
Review your internal controls A company's technology
infrastructure may be more than adequate, while its
procedures are not. We bring the perspective of whatworks—and does not work—in organizations like yours.

For more information
Visit sophos.com/support to learn
how we can help your organization.

Security Consulting

Recommend policies and workflow Our industry
best-practices recommendations help boost your internal
security processes.

We assess, identify and recommend Reviews and designs toways to remove the threats
incorporate overall security policy
best practices
The Sophos Security Consulting engagement
lets you draw upon the experience of our skilled
consultants. We can work with you to assessyour current security posture, proactively
identify the security vulnerabilities within yourinfrastructure and offer recommendations toresolve them.

Time and change often work together todegrade the security of your infrastructure.
Sophos Security Consulting offers theexperienced security resources skilled inreviewing, adjusting or building a more secure
IT environment.

Assess IT infrastructure We test and probe looking forvulnerabilities in your network applications and overall
security position.

Review controls and policies We check yourexisting internal controls and policies for effectivenessand enforcement.

Identify the exposures We work with customized tools andmethodologies to find the weaknesses in your deployment.

Recommend changes We propose best-practicemodifications to internal controls and policies.

Immediate remediation We recommend measures toresolve identified threats.

Architecture and design If necessary, we recommend
changes to IT platforms.

Detailed reporting and analyses
The key to any successful engagement is theability to take action and resolve exposures.
Sophos Security Consulting will deliverprioritized recommendations that maximize
overall security and protection levels.
Security design report This report allows you to execute a
step-by-step approach to improving your infrastructure andsupporting policies.
Vulnerability penetration test The prioritized findings
enable you to quickly determine a course of action.

Proven ITIL-based methodology

PROJECT OVERSIGHT

PROJECT
INITIATION

Security Consulting

ASSESSMENT /EVALUATIONDESIGN /IMPLEMENTATIONDEPLOYMENT /OPERATION

PROJECTHANDOFF

We apply a comprehensive, ITIL-based methodology andproven tools to every engagement. You receive not only
the best expertise, but the best practices to help you
deploy and use your Sophos software.

Security Consulting

Get more out of your software—from planning to operation
Sophos Professional Services support thelifecycle of Sophos software—from planningand implementation to ongoing operation ofthe system.

PLAN

services
lifecycle

MANAGE

BUILDSecurity Consulting is available and readywhen your organization would like to improve
procedures and controls for current andfuture security challenges. Whether you needstronger internal controls to close security
gaps and match best practices, or knowledgetransfer for your people, we can quickly help
you meet your information and network
security needs.

For more information
Visit sophos.com/support to learn
how we can help your organization.

United Kingdom Sales:
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales:
Toll Free: 1-866-866-2802
Email: nasales@sophos.com

Boston, USA | Oxford, UK© Copyright 2012. Sophos Ltd. All rights reserved.
All trademarks are the property of their respective owners.
Sophos dsna02.12v1.dNA

Australia and New Zealand Sales:
Tel: +61 2 9409 9100
Email: sales@sophos.com.au