Electronic Risks

What are they?

Electronic risks include unauthorized access to or theft of data, computer crime, viruses, electronic vandalism or defamation, attacks to your systems such that you lose performance or access to them, unauthorized e-commerce transactions, invasion of privacy, loss of trade secrets, even inadvertent programming errors.  Many businesses have not given adequate consideration to security issues.  Northington Consulting raises awareness among its clients regarding the issues surrounding computer security.  We can even help you learn about HIPAA or Gramm Leach Bliley security compliance.

We collaborate to provide information and solutions for secure protection of critical computing networks and equipment against potential computer attacks. We are committed to helping our clients in all areas of common sense computer security.   Test your cyber security knowledge.

Often, insurance coverage can often be placed to cover legitimate loss of business income due to an e-business incident as well as investigation expenses, alleged unauthorized e-commerce transactions, public relations expense coverage to help re-build reputation, development cost coverage for loss of software or proprietary data, and unintentional programming or processing errors made by authorized personnel.

Policy coverage can often be provided against computer viruses that damage your data or systems, loss of intellectual property by distribution, alteration or destruction, attacks to your systems such that you lose performance or access to your e-business activities, impairment or interruption of service liability from third parties, electronic publishing liability, web page defacement, e-business extortion, computer theft and difference in conditions coverage, to address potential "gray" areas found in other insurance policies in connection with an interruption of service or a covered electronic publishing wrongful act.

Why doesn't my existing insurance coverage take care of all of my e-business risks?

There are a number of electronic exposures coming to light for the first time. Existing policy coverages were not designed to take into account the sheer scope of new exposures brought on by the electronic information age and the Internet's information super highway. Many gaps may exist between the myriad of traditional general liability, bond, computer crime, electronic data processing equipment and professional liability insurance policies. These policies generally provide policy exclusions including publishing liability or even non-fraudulent, unintentional or non-malicious programming and processing errors as well as the destruction or damage of electronic data caused by authorized personnel. 

What electronic security solutions should I consider?

Our consulting capabilities include the utilization of highly trained security experts and network solution providers to help your company assess, protect against, detect, and respond to electronic security threats from within or outside your  company.  This can include all phases of incident monitoring, emergency response, incident reporting, network testing and management of the security vulnerability lifecycle.  Some of these services include:

Security Assessment —  identify immediate security concerns and network weaknesses, and then use this information as the basis for a network review.

Penetration Testing — attempts to externally assess the type and extent of security-related vulnerabilities that may exist in your current system.

Security Policy Design — puts existing security requirements into a corporate security document to ensure that information assets are protected throughout the company's network.

Firewall Protection — designed to prevent entry to your network with a special security system that prevents external hackers from abusing Internet connections.

Remote Access and Virtual Private Network (VPN) — Establish and maintain your VPN to ensure that only authorized users can access your network. Use sophisticated encryption technologies to encode data and prevent unintended recipients from capitalizing on it.

Intrusion Detection — Utilizes advanced detection technologies to scan for firewall "holes" and immediately detect and neutralize hacker attempts.

Virus and Malicious Code Protection — provides protection mechanisms so that viruses and malicious code which can be disguised as un-harmful data such as e-mail—cannot penetrate your company's network.
 

Vulnerability Database and Intelligence Alerting Service — provides an asset based enterprise vulnerability management solution that allows vulnerability countermeasures to be managed and reported throughout the entire enterprise in a real-time format.

Training — education on practical solutions to everyday network security issues.

Go to our "Top Ten" e-Security Checklist

View Insuring Electronic Risks Presentation

Go to our Network Security Surveys

View the National Infrastructure Protection Center's Warnings

 

Client Approach  | Typical Engagement | Expertise | Program Management