FEDERAL SUPPLY SERVICE Federal Network Systems LLC - Verizon

• Firewall Assessment. Verizon Professional Security Services uses proven automated and manual
processes to review customers’ Internet, Extranet, or Intranet firewall architectures to ensure that
valuable assets are protected from attack. The assessment gathers data on operating system
configurations, firewall administrative access, and firewall rule sets. The data are then compared
against industry best practices, known security vulnerabilities, and compliance with any existing
company security polices. The assessment culminates in a written report with findings and
recommendations.
• Security Policy Reviews. These are high-level assessments of an organization’s current policies,
how they are disseminated to employees, and how they are enforced. The process begins with a
customer interview, which results in an assessment of the current written policy.
Please note that this review does not include the creation or modification of existing security policy, a
service that Verizon offers as Security Policy Planning and Development. The final report will make
recommendations about any deficiencies found during the review process.
This review typically covers three major areas:
- Logical Security. Includes system access control (i.e., log-in), password policy, software
configuration and change control, anti-virus protection, acceptable use, data security, privacy, data
availability, and data integrity.
- Managerial Security. Includes security awareness training, personnel security, organizational
structure (division of responsibility), policy enforcement, incident handling procedures, and
separation of duties.
- Physical Security. Includes building access control, restricted access to computer facilities (e.g.,
server rooms), and computer location. Can also cover fire-suppression systems, facility
construction, or air conditioning.
• Security Policy Planning and Development. This service covers all of the basic
analysis of the Security Policy Review (logical, managerial, physical security reviews),
but goes beyond the review stage to provide businesses with a standard "Best Practices"
Security Policy template. The template identifies, recommends, and implements
appropriate security policy and policy-specified safeguards to help protect customers’
information assets. Key components include:
- Assessment of the full range of security policy and planning, including privacy, confidentiality,
administration, Internet access, remote access, incident handling, audit requirements, roles and
responsibilities, training and awareness, etc.
- Draft Security Policy
- Presentation of Draft Policy
- Final Security Policy with high-level implementation plan
• Technology Planning for Security Safeguards. This service helps customers select the
best security solutions for their needs from a broad range of security consulting services.
Verizon security consultants provide two (2) days of onsite consulting services to help
customers select, design, and configure a robust security solution. Verizon offers
technology planning services for the following security safeguards:
- Firewalls - Two-Factor Authentication
- Intrusion Detection Systems - PKI/ LDAP/ X.500
- Virus Protection - Physical Security
- Content Filtering - Biometrics
- URL Filtering - RADIUS Servers
- Encryption
• Customer Training (Awareness, Executive Security, and IT Security). Verizon offers
three types of training sessions for customers, which include Awareness Training,
Executive Security Training (different from the pre-sales Executive Security Briefing),
and IT Security Training.