FIS Profile Summary V7.3
1 like1,101 views
This document summarizes the vision and approach of First Information Security (FIS) to become the largest information security services and solutions company in the MENA region. FIS provides managed security services, security solutions and services, advanced training, and incident response and forensics. It aims to build information security knowledge through training programs and deploy forensic laboratories. FIS leverages best practices, security metrics, standards and other approaches to deliver transformational security through a focus on people, process and technology.
FIS Profile Summary V7.3
- 1. The Power To Secure Introduction Jorge Sebastiao COO
- 2. Infosec Issues Mobile Malware up 1,200% Q1 2012 Motivation 2012 Global Attacks Complexity
- 4. Our approach to Security is too complex
- 5. A Vision “To build the largest information security services & solutions company in the MENA region” 5
- 6. A Team Dr. Taher Elgamal CEO Jorge Sebastiao COODr. Sherif El Kassas CTO Sherif Shaltout Director of Service Delivery General Badr Khairy VP of BD Rania El Rouby Director of Technical Sales Hesham Amin CFO Anwar Al Kindi Director of HR Training
- 7. Business Overview First Information Security Managed Security Services & Security Metrics Solutions & Services Advanced Training Incidence Response & Forensics & Disaster Recovery
- 8. Managed Security Services Managed Security Services Monitor & IR • Monitoring and threat management • Aggregation of logs • Anomaly detection • alerts Perimeter Protection • Managed Firewall, UTM, IPS, Anti- Malware, etc. In cloud MSS • Clean pipes • Anti-malware, etc • Antifraud DOS/DDOS mitigation End-user/device management
- 9. Solutions & Services • Risk assessment • Vulnerability assessment • Penetration testing Security assessment • Architecture, solution selection • Compliance gap analysis • Secure application development Roadmap and compliance • Incident management • Response services • Forensics and support services Incident handling • Integration • Customization • Localization Solutions
- 10. We build Infosec knowledge Information Security Awareness Program Securing the weakest link Create knowledge to change behavior Information Security Fundamentals Threats and Risks Controls Specialized Information Security Training (role based) Security Assessment Secure Coding Forensics
- 11. Forensic Laboratories Deployment Incident Response Evidence Acquisition Evidence Preservation Media Recovery Mobile Devices Forensics Email Investigations Password Recovery Network Forensics Browser Investigations Multimedia Forensics Optical Media Forensics Malware Analysis Internet Investigations eDiscovery Mac Forensics Wireless Forensics CCTV & Video Forensics Encryption Attacks Smart Phone Forensics Core Forensic Laboratory
- 12. Advanced Infosec • Forensics • Security Metrics • SDLC & Code Security • Cloud Security • Customized Encryption • Transformational Security • Big Data Analytics • CERT • Cyber warfare • Total Integrated Security • Homeland Security
- 13. Its all about time…
- 14. TBS- Time Based Security Protection DetectionResponse SECURITY P>D+R Anti-virus VPN, Quantum Firewall, IPS Access Control Grid Time Response Patch Mgmt Incidence Response Disaster Recovery Vulnerability Testing SIEM, Correlation Quantum CCTV, Access Control
- 15. Total Integrated security Total Integrated Security Physical Security Management Information Security Management Telecom Security Management
- 17. A5 - Process Business Risk Controls Maturity
- 18. Defense in depth
- 19. Business Continuity Management Business Impact Analysis Risk Analysis Recovery Strategy Group Plans and Procedures Business Continuity Planning Initiation Risk Reduction Implement Standby Facilities Create Planning Organization Testing PROCESS Change Management Education Testing Review Policy ScopeResourcesOrganization BCM Ongoing Process BCM Project BCM Ongoing
- 20. Crisis Management Response steps DetectionAssessment DecisionResponse Recovery Preparation to Prevent Open Platform for Safety and Security Incident 1 2 3 4 5 6 Command and Control Mission-Critical Network Sensing and Actuation Notifying Entity & Authority Mobilization of Forces Incident Collaboration Notification to Authority Sensing Mobilized Force Incident Corroboration Command Control Actuation Completion Record
- 21. Best Practices Security Metrics Key Performance Indicators CoBiT, Compliance ITIL ISO20000 ISMS ISO27001 BCMS ISO22301 Time Based Security
- 22. Securing Voice and SMS
- 23. Securing Applications & Emails, Contacts,…
- 25. Transformational Value FIS Unique Value Security Metrics & Managed Security Services & Encryption Arabization & Localization & Training Best Practices & Infosec Maturity Standards Incidence Response & Forensics & BCP Disaster Recovery
- 27. We leverage references Finance Government Telecom
- 29. 29 FIS Saudi Kingdom Tower P.O Box: 230888 Riyadh 11321 – KSA Tel: +966 1 211 8041 Fax: +966 1 211 8001 FIS Egypt 7 Ibn Gobier St., El Orouba- Heliopolis, Cairo - Egypt Tel: +202 2418 8252 Fax: +202 2417 1278 FIS UAE P.O.Box: 37148 Abu Dhabi – UAE Tel: +971 2 658 1050 Fax: +971 2 658 1070 FIS Oman P.O.Box: 196 Muscat - Oman Tel: +968 24707727 Fax: +968 24797709 FIS UAE World Trade Center P.O.Box: 9677 Dubai – UAE Tel: +971 4 332 2555 Fax: +971 4 332 8777 FIS Qatar P.O.Box: 3735 Doha - Qatar Tel: +974 4877193 Fax: +974 4877206 Regional Presence
- 30. The Power To Secure Q&A Jorge Sebastiao COO http://linkedin.com/in/sebastiao