2009-11-09 Regular Meeting of La Porte City Council

Browse Search

RSA CORP I business I technologyn7 ItJ P,O, Box 890646 I Houston, TX 77289 I 281,488.7961 I www.RSAcorp.comlinfo@RSAcorp.com · Internal Assessment o Review the configuration and setup of the server used to transmit payment information for utilities, court fees, etc. o Diagram network setup, review network security configuration and test for ease of penetration (all servers) o Social engineering tests at various city locations to test vulnerability of penetrating the city's systems via social tactics o Review of current IT policies and procedures for IT security Approach RSA Corp proposes to setup discovery tools and document all wireless access points which could potentially affect the security of the city's network. We propose to document whether or not the access points are completely open or utilize encryption and the type of encryption utilized. RSA Corp will attempt to gain access to the city's network and will document and take screen shots of findings up to administrative login pages, but will not use brute force methods to enter or potentially disrupt the network as a whole. RSA Corp will work both on- site and from remote locations during the duration of the project and will not notify the city of the specific times and dates of the penetration testing as to conduct the testing blindly. This methodology allows for accurate and realistic information to be gathered without potential staff intervention. Relating to the testing of external facing IP addresses and website penetration tests, RSA plans to utilize two separate security teams. One team will be provided a range of IP addresses to test, while another team will be tasked in locating potential IP addresses associated with the City of La Porte, without being provided technical information. All sources of information discovered will be tested and included in the findings report. Your Pai"1ner for IT Strategy, Services & Staffinq, Visit our brog at www.PartnerIT.com.