IT is a great resource for any company, however, with the benefits also come the risks. These risks come in many forms from virus infections and hacker intrusions to Denial of Service attacks or even a disgruntled employee sending out information to competitors.

These risks are not selective, both large and small businesses are vulnerable to attacks. Large companies tend to be more prepared with firewalls, anti-virus/intrusion detection/content filtering software as well as a solid backup strategy. A small home/office network tends to have very limited protection and a poor or non-existent backup solution.

Yacc Labs has been involved in computer security since our inception in 1989 and offers a level of expertise in network security that will protect both large and small companies alike.

The services that we offer have grown steadily from the secure UNIX distributions provided in the early days of our business, to the wide range of security services offered today, including:

• The development of full function security appliances.
• The development of security and network management applications.
• Design and implementation of security infrastructure, specialising in the use of open source products and mobile/home worker requirements
• Security training for end users, and mentoring for security managers
• A full range of investigation and audit services, including open and covert penetration exercises and software integrity testing. The development and implementation of Security Policy, including preparation for ISO17799
• Remote management of security infrastructure on behalf of clients

Our security clients range from UK Government organisations and large corporates, through to small organisations with fairly modest requirements.

The nature of this business, and the legal constraints imposed upon us by our various clients in regard to it, make it impossible to provide details at this time. We can however provide any testimonials, where necessary, on a per-case basis, and if required, place potential clients in direct contact with those we have undertaken assignments for in the past.

Our methodology includes:

• Risk identification
• Risk prioritisation
• Appropriate and cost-effective control measures
• Establishing policies for internal training
• The review, reporting and update process.