BUILDING TRUSTED CYBER SECURITY SOLUTIONS

Transcription

1 BUILDING TRUSTED CYBER SECURITY SOLUTIONS

2 Protect your organisation, technology, people and information The explosion of newer, smarter and more connected networks and devices are driving the evolution of our modern economy. It is an economy built on digital innovation, information technology, connectivity and efficiency. As digital technology becomes increasingly pervasive and cyber-attacks get more sophisticated and common, the likelihood of a cyber breach happening to an enterprise, government agency or even the nation also increases. It is hence imperative for organisations to defend against cyber threats by improving and strengthening their cyber security capabilities. Cyber Security at ST Electronics With our domain expertise in cyber security, we specialise in the design and development of indigenous products, providing comprehensive cyber security capabilities to secure organisation network, information and critical infrastructures. Our mission is to deliver trusted integrated cyber security solutions, help government and commercial customers meet their current information security needs and stay ready for future challenges. Riding on our deep engineering expertise and recognised technology process design, we are constantly innovating and developing new technologies to improve our cyber security products and solutions for our clients.

3 CONTENTS Our Core Strengths Power of a Holistic Approach Pillar 1: Encryption and Cyber Security Solutions Pillar 2: Cyber Security System Pillar 3: Professional Services Pillar 4: Managed Security Services More About Us

4 OUR CORE STRENGTHS People Decades of proven specialised skills in cyber security with portfolios in designing and building world-class National Security Operations Centres (NSOCs) for local and international clients. Deep understanding of information security, technologies and operations implementations, to develop, implement and deliver a secure critical infrastructure and cyber eco-system. Certified consultants and cyber security experts equipped with latest skills and technology know-how, to help customers develop and implement security policies and strategies. Process Build successful programmes with strong governance attitudes and actions. Adopt a framework approach proven by global standards that comprises the 4 key areas of Protection, Detection, Response and Recovery. Use of advanced event management tools and dynamic system architecture with automation and analytic tools capabilities, to combat evolving cyber threats and zero-day vulnerabilities. Apply deep engineering expertise and end-to-end cyber security system integration capabilities to offer customers integrated cyber security solutions tailored to their needs. Product Indigenous products and solutions with advanced tools and technologies. Comprehensive suite of future-ready cyber security capabilities and end-to-end solutions. New cyber security architecture and technology tools that are agile and adapt to the needs of dynamic IT and OT networks for defending cyber threats, while streamlining processes and reliance on human capital. 4

5 5 POWER OF A HOLISTIC APPROACH Our holistic approach towards cyber security and operations is designed to provide organisations with a trusted source of expertise and solutions that address cyber security challenges. Our core strengths are in designing, building, implementing and managing security infrastructure that can either integrate into an existing infrastructure, or be incorporated as a total new security architecture design and build process. We help our customers think more broadly about cyber security, and equip them with robust and future-ready capabilities through an end-to-end portfolio of services complemented by the following: Encryption and Cyber Security Solutions Cyber Security System Professional Services Managed Security Services

6 Encryption and Cyber Security Solutions Trusted Enterprise Solutions Encryption Solutions Our enterprise communication security solutions provide a comprehensive, reliable and scalable infrastructure that streamlines communications and personalises user experience to offer a highly secure and cost effective foundation for communications across networks. They comprise the four segments of Trusted Workspace, Communication, Network, and Storage integrated solutions. Trusted Workspace (Secure Data in Use) Trusted Communication (Secure Data in Use) Trusted Network (Secure Data in Motion) Trusted Storage (Secure Data at Rest) Black Computer Unique computer designed to provide security at your convenience; it has two securely segregated workspaces, allowing users to work in both trusted (Intranet) and untrusted (Internet) environments. The segregation is hardware-defined which enforces isolation to guard against any cyber exploitation s and dealings with the unknowns, that is, the Internet environment. PhoneCrypt Dedicated secure Voice over IP (VoIP) and Instant Messaging (IM) solution to ensure complete privacy for voice and IM communications. Designed for enterprise users, the solution comprises of front-end clients and back-end VoIP/IM system which offer true End-to-End protection. NetCrypt A series of Internet Protocol encryptors that offers versatility and flexibility for users to leverage the public Ethernet/Internet Protocol (IP) infrastructure and connect to multiple sites in a secure manner. EtherCrypt High performance encryptors that protect the transmission of sensitive data over Ethernet and Metro- Ethernet networks. VPNCrypt Secures data and communication to enhance remote and inter-office connectivity (supports ST Electronics NetCrypt IP encryptor users). DiskCrypt Mobile External hard drive with full disk encryption and smartcard based authentication to protect users data. 6

7 7 We leverage our deep experience in designing and implementing end-to-end encryption solutions, securing backend networks, endpoints, s, mobile, communications and content security. Our comprehensive suite of cryptography solutions and cyber security products are compliant to stringent global standards and can be integrated into the architecture of government and commercial infrastructures. We design cryptography technology solutions to provide high assurance network encryption in the space of internet protocol and secure connections at multiple sites over public internet or private Internet Protocol (IP) infrastructure. We harness deep engineering expertise to deliver indigenous cyber security products that are trusted to provide robust network and infrastructure protection. Cyber Security Solutions Authentication and Digital Identity Management Solutions Digital Identity Management Provides a common and secure platform for users to access and perform multiple personal transactions. Through a convenient and userfriendly interface, it enables the user to do a singlesign-on to access multiple digital platforms. Our solution can integrate with an array of hardware tokens, software tokens, one-time-password using SMS or instant messaging and social media ID. Authentication Server ST Electronics Authentication Server is designed to meet the stringent security and high availability specifications of government and financial institutions. It has been deployed to provide 1-Factor Authentication (FA) & 2FA for various web portals, Virtual Private Networks, operation systems, intranet logins, network devices and systems. Cyber Data-Control Solutions Industrial Control Systems (ICS) Security As operational systems become more interconnected, the exposure to targeted cyber-attacks also increases. As we understand the vulnerabilities in operational technology, we provide the various structures for security, so as to protect organisations industrial controls and critical infrastructure networks, improve safety, optimise production and maintain availability across ICS environment. ST Electronics Data Diode Enables organisations to transfer data from one domain to another via a secure one-way data transfer throughout. Designed with high level assurance features to protect and strengthen the security resilience of Information Technology and Industrial Control Systems against targeted cyber-attacks.

8 Cyber Security System An effective cyber security strategy entails the alignment of essential areas as we help our customers develop the people, processes, infrastructures and technologies to overcome the challenges of fast evolving and pervasive cyber threats. Cyber Security Command and Control Centre A leading cyber security solutions provider, we design, build, operate and maintain Cyber Security Operations Centres (SOC) to help organisations detect, defend, respond and recover from cyber-attacks. Our SOC technologies have been audited and rated as comparable to leading Cyber SOCs across the world. The new ST Electronics Cyber Security Command and Control Centre is designed to offer comprehensive situational awareness, heightened security monitoring and response capabilities. Manages high volume data and sophisticated cyber-attacks in the shortest time possible. It leverages threat intelligence, and adopts advance data analytics and automation capabilities to enable rapid incident response. Requires a leaner skilled operations team of operators for more efficient management of incident response. Adapts easily with modular and scalable SOC architecture. Able to inject new technology easily to tackle evolving cyber threats. Training and Development ST Electronics Cyber Security Centre has set its sights on being the trusted cyber security knowledge excellence centre both in Singapore and in Asia Pacific. In addition to offering industry recognised certifications, the centre provides cyber security training delivery and competency assessment services based on the latest cyber defence technology and practical methodologies to address real word cyber threats. Targeted cyber range sessions are integrated into all cyber security preparatory courses to focus on the application of knowledge. The range of targeted training programmes caters to: IT executives, Info/Cyber Security professionals, IT management, C-suites and senior management. There are 3 core attributes to our unique offerings: Deep knowledge capabilities Practical knowledge Scenario-based learning 8

9 9 Professional Services Maintaining a strong security posture and compliance helps to contribute towards the long-term success of any organisation. To ensure cyber resilience, adopt a proactive and regular approach towards security testing, review and audit for information security applications, systems and networks. This includes continuous identification of threats and vulnerabilities that could potentially impact the organisation. Vulnerability Assessment and Penetration Testing (VAPT) is an integral aspect of Cyber Security Professional Service. Its focus is on providing independent information security assessments and consultancy services such as security testing and security review for defence, government organisations, commercial entities and financial institutions. Other key services include: Network and Wireless Vulnerability Assessment Web Application and Mobile Penetration Security Policy and Process Review and Development Phishing Campaign Security Compliance and Risk Assessment Cyber Security Forensics and Threat Hunting Cyber Threats and Vulnerability Research

10 Managed Security Services While most organisations understand the importance of protecting network infrastructures from cyberattacks, not all have the resources to establish a cost-effective, robust and proactive security posture in-house. Our subscription-based Managed Security Services can help provide or complement your organisation s security team with the required expertise and services cost effectively. We provide organisations with intelligence-driven, proactive and managed real-time cyber security monitoring and alerts, advanced threat detection analytic capabilities as well as incident investigations and response support through our Managed Detection and Response services. Powered by our ST Electronics Cyber Security Command and Control Centre, we are able to provide state-of-art SOC monitoring for your IT infrastructure against cyber-attacks from external sources and within customers organisations, making managed security operations work for them. We are confident that our deep system engineering expertise, the expertise of our strategic partners, domain experience and our commitment will offer plenty of value for our customers. 10

11 11 MORE ABOUT US Quality Assurance and Our Commitment With an ISO 9001 : 2008 certification and a strong culture of quality excellence in cyber security, ST Electronics is committed to deliver quality products and services in a timely and cost-effective manner. We have also achieved the ISO : 2005 standard which specifies the requirement for implementation, establishment, operation, monitoring, research, maintenance and improvement of documented information security management system. Trust and Confidence to Connect Our extensive experience illustrates that comprehensive, scalable and integrated security operations are crucial to the security of your business. We respect the confidentiality of our customers as we work closely with you to address every stage of cyber-attack cycle with industry-leading threat intelligence, advance testing and monitoring, incident response and cyber skills development services to strengthen cyber defence and safe interconnected environment. Global Presence ST Electronics is headquartered in Singapore with an established international presence. It has offices and operations in over 20 countries globally including Bangladesh, Botswana, China (including Hong Kong), Europe, the Gulf States, India, Malaysia, Mexico, South Africa, Taiwan, Thailand, and the US. Together with VT idirect in the US and ST Electronics subsidiaries VT MÄK and its subsidiaries in Europe, Antycip Simulation Limited and Telematics Wireless Ltd, the company is able to augment its capabilities and extend its market reach in the areas of satellite communications, simulation training and telematics. The company s global presence has enabled it to win international contracts and support its worldwide customers in Botswana, China, the Maldives, Kazakhstan, Mexico, Taiwan, the Philippines, Saudi Arabia, Thailand and more. In recent years, ST Electronics has strengthened and expanded its global activities and now has customer base of more than 100 countries.

12 For more information, please contact: or visit ST Electronics (Info-Security) Pte Ltd 100 Jurong East Street 21, ST Electronics Jurong East Building, Singapore Phone: (65) Fax: (65) (Regn. No: G) CERT NO: ISO 9001: 2008 CERT NO: IS ISO 27001: 2013 The development of DigiSAFE products and services is continuous and published information maybe suspended. All rights to the mentioned trademarks reside with their respective owners. DigiSAFE logo, Stegmark, DigiSAFE, Bigbouncer, DeskCrypt, KeyCrypt, NetProtect, PhoneCrypt, DiskCrypt Mobile, DiskCrypt, NetCrypt & MobileCrypt are registered trademarks of ST Electronics (Info-Security) Pte Ltd 2016 Printed by ST Electronics (Info-Security) Pte Ltd in Jan Information is correct at the time of printing.