This field is provided by Viet sifo High Technology Solution Joint Stock Company - an affiliated company of NGS. Viet sifo focuses on providing the following services:
centralized MANAGEMENT AND monitoring SERVICES
Security information & event management (SIEM) is a solution designed to collect daily security information from endpoint devices and store it centrally so that the security team can easily manage and query events simultaneously and comprehensively. Thus, these events will be tracked-analyzed in real-time to increase the ability of detection and quickly response. Understanding the difficulties and challenges in the implementation and operation of SIEM, the centralized management and monitoring services supplied by Viet sifo - NGS's affiliated company - will provide the comprehensive solutions for technology, human resource and operation process:
- As a partner of RSA in Vietnam - the provider of RSA NETWITNESS SIEM solution
- The system will be operated and monitored 24/7/365 by a team of experienced employees and experts divided into different tiers.
- Provide full process in operating the system suitable for each organization, and have detailed technical guidelines for analysis and handling each type of information security incidents.
- Detailed and accurate reports for each incident and periodically for weekly / monthly / annual
- Information related to the customer system and incidents will be collected, stored safely to ensure data confidentiality and integrity.
- When a security incident occurs, the onsite experts at the customer’s location will support to response and solve this issue according to troubleshooting process.
SECURITY TESTING SERVICES
- Security testing service for Web/Service application
- Mobile application security testing service
- Phishing attack testing service
- Wireless network testing service
- Internal network testing service
SERVICES OF INFORMATION SECURITY INCIDENT RESPONSE AND TROUBLESHOOTING
Viet sifo will send onsite experts to the customer’s location to respond and troubleshoot incidents. The scope of work includes: Investigating traces, identifying attacked points; Isolating the attacked system from information technology infrastructure; Backing up data for later investigation; Cleaning the attacked system; Re-deploying the service; Patching security holes and making sure the system will be not attacked again through the previous security holes; Retesting the system; Running the services on the system after cleaning; Monitoring hacker activities and ensuring the system will not have any backdoor for at least 30 days.
ARCHITECTURAL CONSULTING SERVICES AND IMPLEMENTATION OF CYBER SECURITY SOLUTIONS
- Consulting cyber security architecture
- Implementing cyber security solutions
INFORMATION SECURITY TRAINING SERVICES
- Training on user information security awareness
- Training on information security of system - network
- Training on assessment of information security applications
- Training on programming of application safety
- Training on rehearsals of incident response and investigation of information security incidents.