Security Management Framework

//Engineering

Customer Challenge

A ransomware attack led to the loss of large amounts of data and impacted business continuity. Crucial business data was lost, business continuity affected, with all work coming to a halt. Applications such as Design Engineering, emails, etc. could not be accessed. i-Source was chosen to do a detailed due diligence and create a framework to ensure an improved security posture to avoid such cyber-attacks in the future.

i-Source Solution

A detailed due diligence of IT Infrastructure was conducted, and vulnerabilities were recorded. These included improper server infrastructure and connectivity, inadequate configuration of security devices, improper backup & recovery processes and policies, and lack of governance model in IT operations. The architecture was re-designed to support business requirements.

i-Source Built a Security Policy Framework for the Client:

  • Refinement of Infrastructure: This included Virtual Servers with redundant architecture, Hybrid storage having SAN and NAS capabilities, replacement of LAN switches with Gigabit ports, ensuring license compliance.
  • Standardization of Support Processes: ITIL-based incident management process designed and implemented for remote support environment.
  • Setting up Backup Processes: Set an industry standard native backup tool for VM backups with design of proper backup policy.
  • Remote Management Services: Using remote monitoring and management tools, alerts were configured on the servers and network devices to proactively monitor the health.
  • Networking: Logical segregation of networks to contain the broadcast through VLAN and Access list configuration. Network performance optimization by replacing unmanaged Fast Ethernet switches with Manageable Gigabit switches. Real-time Network monitoring for switches and firewall.
  • Servers and Storage: Ensured optimization of servers with redundancy and virtualization. Also implemented DR ready, high performance hybrid storage.
  • Security and Service Management: On-prem exchange replaced with O365 for mailing to reduce on-prem management hassles, replaced previous set-up with new firewall having better security features.

Business Value Delivered

  • Higher service availability and predictability
  • Improved uptime of IT assets nearing 99.9%
  • Improved utilization of IT assets
  • Improved network performance – current uptime 99%
  • Backup and restoration reliability – compliance 99.5%
  • Business hours service ensuring global business delivery assurance to their clients.