• Consultation & professional services
• Security Assessment
• Audit
• Training

• Design & implementation of counter-measures & standard protection services:
  

• Implement the best Network & IT security solutions, including full network deployment and Security Policies, SSL protection of Intranets and Extranets, Wireless LAN, UTM Firewalls, VPN, and E-mail Security.
• Provide the most advanced and proven Technologies and Practices to secure your Intellectual Assets at optimal cost.
• Extensive expertise in Data Security Management, concepts and principles.
• Review for conformance with common security models and review of auditing and monitoring capabilities.
• Analysis of vulnerability to malicious attacks.
• Assist with Counter Measures, Disaster Recovery planning, analysis of asset valuation, Physical Security, and establishing policies and roles.



• Design & implementation of PKI services:

We offer consulting and/ or training in the following areas

A. PKI Legal/ Regulatory Services

1. Review the legal frame work

Review the current approved legal frame work. Provide recommendations

2. Create/ review certificate policy

Certificate policy should cover the following main points:

• PKI Architecture
• Certificate Uses
• Procedures
• Certificate Revocation Lists
• Audit and Assessments
• Key Generation
• Audit and Assessments

3. Create/ review certificate policy statement

Certificate policy statement should cover the following main points:

• Issuance
• Publication
• Archiving
• Revocation
• Renewal

B. PKI Technical Services

• Establish large scale Certificate Authority built and customized to local standards, using both proprietary and open-source software. Establishment of the CA includes:

• Generation, storage and backup of root keys according to the best practices and standards. Support of secured media with strict access policy.
• Multiple CAs and CA levels, with cross certification and CAs bridging.
• Support and enhance online certificate lifecycle operations with full support of CRL and OCSP.
• Group/Mass production of certificates and auto-enrollment.
• Configuration of the Key recovery option.
• Unified logging and monitoring for the whole system.
• Secured Infrastructure utilizing best of the bread counter measures including unified threat management systems.
• Hardened OS, DB, Network, Services and Applications.
• Proper Security Policies with special attention to: Physical Security, Data Protection, Disaster Recovery and Business Continuity planning.

1. Support of the following technical features:

• Compliance with NSA SUITE B algorithms and certificates.
• Follows X509 and PKIX (RFC5280) standards where applicable.
• Support X.509 certificates and Card Verifiable certificates (CVC BSI TR-03110 used by EU EAC E-Passports).
• RSA, DSA, ECDSA key algorithm with large keys sizes.
• Multiple hash algorithms for signatures, SHA-1, SHA-2.
• Hardware Security Modules (HSMs).
• Client, SSL and Code Signing certificates.
• PKCS12, JKS or PEM.
• Mobile devices certificates.
• QCS for issuing EU/ETSI qualified certificates.
• CMP (RFC4210 and RFC4211).
• Synchronous XKMS version 2 requests.
• Authentication and storage in SQL database, LDAP, Active Directory and/or other custom data source.

• Help implement PKI on the following models:

1-    National ID

2-    Car Registration and Drivers’ license

3-    E-Banking and E-commerce and E-government

4-    Corporate E-mail encryption and data protection

5-    Boarder control and cross-countries traffic

6-    Different access control systems

7-    Taxation system and National Digital Signature projects

C. PKI Administration Services

1. Establish PKI management process
2. Help qualify RA as registration authority
3. Help in the process of establishing the hierarchies and hiring of the right personnel.
4. Help with the standards for the physical security of the private key, machines, networks, etc.