SOLUTIONS BRIEFS PROFESSIONAL SERVICES (Solution Brief)

SOLUTIONSBRIEFSPROFESSIONAL SERVICES (Solution Brief)The most effective way for organizations to reduce the cost of maintaining enterprise security andimprove security postures is to automate and optimize information security. Vanguard ProfessionalServices offers a wide range of z/OS security, cloud and enterprise services to enable securityautomation and optimization.The Vanguard Professional Services team, the largest and most experienced group of z/OS security,cloud and enterprise experts in the industry, has a proven track record and 30 years of satisfiedcustomers.KEY FEATURES:The largest and most experienced group of cybersecurityexperts in the industry.Team members average 30 years of cybersecurityexperience.Team members provide knowledge transfer and trainingto internal security teams to ensure assets are protected.Page 12005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

SOLUTIONSBRIEFSSOLUTION BRIEFVANGUARD PROFESSIONAL SERVICESINCLUDE: Penetration testing to detect systemweaknesses and exposures. Security assessments to identifyvulnerabilities and prioritize risk. Remediation services to reduce risk andensure compliance. Implementations of applications and z/OSSecurity Server services to optimizesecurity systems and procedures. Migrations to RACF from ACF2, TopSecret and DB2 to streamline securityadministration and increase protection. Customized training programs to enableorganizations to implement and maintainsecure and compliant mainframesystems.Page 22005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

SOLUTIONSBRIEFSVANGUARD PENETRATIONTESTINGVANGUARD SECURITYASSESSMENTSVanguard Penetration Testing helpsVanguard’s consultants rigorously evaluateorganizations ensure their mainframethe security conditions of System z and RACFenvironments are protected from attack andto identify mainframe vulnerabilities,in compliance with industry and regulatorydetermine whether security best practices arestandards. Through network and systemimplemented and evaluate the potentialscans, and full intrusion detection, Vanguardimpact of findings on an organization’sconsultants determine the current securitysecurity operations.posture of a System z environment, includingits defense-in-depth posture.Vanguard Security Assessments are basedon current industry standards and provenThe process includes a rigorous review ofbest practices, and are designed to identifysecurity policies, procedures andhigh-risk vulnerabilities that could beconfiguration controls to identify gaps inexploited. Customers receive an actionablesecurity that could be exploited by internalreport that includes details on the findings,and external attackers. By quickly identifyingseverity ranking of each finding, instructionsand prioritizing mainframe penetration risks,for remediating problems and meeting recentVanguard consultants can determine ifmega security breaches.sufficient defenses are in place, offerremediation guidance,and recommend a plan and methodology forongoing testing.Page 32005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

SOLUTIONSBRIEFSVANGUARD REMEDIATIONSERVICESVANGUARD SECURITYIMPLEMENTATION SERVICESRemediation projects resolve risks that areThe Vanguard Professional Services teamdetected by assessments and auditsprovides a wide range of implementation ser-Vanguard Professional Services teamvices including:members apply their deep knowledge ofSystem z security to quickly remedy security New security services Support for industry and regulatoryvulnerabilities and compliance risks.Remediation’s are customized to eachrequirementsorganization’s needs and range from minoradjustments to extensive corrections ofsystems, policies and procedures. Deployment of and training on Vanguardenterprise security solutionsThroughout the process, Vanguard’s expertstransfer knowledge to an organization’sVANGUARD MIGRATION SERVICESinternal security staff about how and whyCentralizing security under a single securitychanges were made and what is required toserver, and away from applications andkeep systems secure.multiple security systems, helps organizationsto streamline security administration andaudits, and reduce costs. Migrations arecommon when organizations merge with oracquire other companies, or when companieswant to reduce risk by centralizingsecurity on a single database. VanguardProfessional Services has assisted manyorganizations with migrations from ACF2 andTop Secret security servers and DB2application security to a single RACFdatabase.Page 42005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

SOLUTIONSBRIEFSVANGUARD TRAINING SERVICESIn many organizations, employees who are unfamiliar with mainframes are now responsible fortheir security and compliance. These employees need to be properly trained on the securityconfiguration control standards specific to System z. Vanguard Professional Services offers publictraining classes on basic, intermediate and advanced System z and RACF security techniques andauditing. Vanguard team members also develop customized onsite training courses to addressspecific skill and knowledge gaps within an organization’s internal security and audit teams.Security Services Role-based access control Enterprise-wide single sign on RACF security for CICS, DB2 or SDSF RACF remote sharing facility RACF database merging Digital certificates Two-factor authentication Continuous monitoring Lightweight directory access protocol (LDAP) UNIX system servicesPage 52005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

SOLUTIONSBRIEFSIndustry and Regulatory Requirements Centers for Medicaid Services (CMS) Defense Information Systems Administration (DISA) STIG Federal Financial Institutions Examination Council (FFIEC) Federal Information System Controls Audit Manual (FISCAM) Gramm-Leach-Bliley (GLB) Health Insurance Portability and Accountability Act (HIPAA) Health Information Trust Alliance (HITRUST) Common Security Framework (CSF) National Institute of Standards and Technology (NIST) Payment Card Industry Data Security Standards (PCI DSS) Sarbanes-Oxley (SOX)Page 62005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

SOLUTIONSBRIEFSWHY VANGUARD?Vanguard offers the most advanced and integratedportfolio of enterprise security products and services in theworld. Vanguard was the first to offer a fully automatedbaseline configuration scanner for mainframeFOR MORE INFORMATIONTo learn more about Vanguard Security Solutions, pleasecontact Vanguard Integrity Professionals at(702) 794. 0014 or visit www.go2vanguard.comThe World’s largest Financial, Insurance, GovernmentAgencies and Retailers entrust their Security toVanguard Integrity Professionals.Corporate HeadquartersVanguard Integrity Professionals6625 S. Eastern Avenue – Suite 100Las Vegas, NV 89119-3930Telephone: 702.794.0014 Fax: 702.794.0023Page 72005 - 2018 Vanguard Integrity Professionals - Nevada All Rights Reserved.PROFESSIONAL SERVICES

Vanguard offers the most advanced and integrated portfolio of enterprise security products and services in the world. Vanguard was the first to offer a fully automated baseline configuration scanner for mainframe FOR MORE INFORMATION To learn more about Vanguard Security Solutions, please contact Vanguard Integrity Professionals at