Product and Service Overview

1. Monday, December 07, 2009 Presentation by: ChristoBoshoff 12:44:04

2. Section 1 Security: The Lay of the Land 12:44:07

3. Security: The Lay of the Land Viruses Information Theft Legal Liability Section 1 12:44:07

4. Security: The Lay of the Land Section 1 12:44:07

5. Security: The Lay of the Land Percentage Contribution to a Security Solution Section 1 12:44:09

6. Section 2 Our Offering 12:44:09

7. Technical Buying Criteria Section 2 12:44:09

9. Tested processes with measurable deliverables at an affordable price

10. We take the responsibility for the actions required to deliver security

11. A security policy that is measured and enforceable

12. This can be delivered anywhere in the worldSection 2 12:44:09

13. Our Offering Our offering is: A modular security service, delivered through onsite appliances, in conjunction with centralized intelligence systems and best practice processes, housed in our SOC. Section 2 12:44:09

15. We are enabling them to provide tangible value

16. We are enhancing their control of their systems

17. We shorten your time to market

18. We remove IT security from the critical path in respect of business process implementation and improvement

19. Integrate with existing security products which results in investment protectionSection 2 12:44:10

20. Co Source Model Security Policy Management Our solution is implemented against an existing security policy or against the Chameleon Policy which is inline with the PCI DSS requirements. Section 2 12:44:10

21. PCI Compliance For companies that transact, store or process credit card information our system measures, as a default, for PCI compliance. We have skills in the company with PCI auditing experience and can implement processes and roadmaps that will assist companies to achieve PCI compliance cost effectively. Section 2 12:44:10

22. PCI Compliance PCI DSS 1.x Requirements Section 2 12:44:21

23. Modular Security Appliance Security appliance that resides in your environment and enables us to deliver our security offering in a modular fashion. Assessments are conducted using 4 different threat engines and providing approximately 25 000 different vulnerability checks, more than 4 times our nearest competitors. Section 2 12:44:21

24. C180 Security appliance that resides in your environment and enables us to deliver our SOC service in secure and reliable fashion Log file collection are conducted using product agnostic technology. Network and Server / Desktop systems are fully supported regardless of the installed Operating System. Section 2 12:44:21

25. Supported Products Security appliance that resides in your environment and enables us to deliver our security offering in a modular fashion. OPERATING SYSTEMS AIX BSD HPUX Linux Mac OSX NetWare Loadable Module Solaris Windows VIRTUALIZATION Citrix XenServer VMware Virtual Infrastructure VI3 VMware ESX Server VMware Virtual Center PROTOCOLS DIG DNS FTP Generic Printer Monitor IRC, RPC Jabber, NNTP, NTP MICROSOFT TECHNOLOGIES Microsoft Active Directory Microsoft Exchange Microsoft IIS Microsoft SQL Server MS Terminal Services Window Services DATABASES MySQL Oracle PostgreSQL SQL Queries SQL Server APPLICATION SERVERS BEA WebLogic ColdFusion MX IBM WebSphere Java Virtual Machine JBoss JMX Enabled Application Servers Tomcat WEB SERVERS Apache Server Load Balancing Virtual Server Squid Web (HTTP) Transactions NETWORK DEVICES AlvarionWiFi , BigIP LTM Virtual Server, BlueCoat Appliances, Brocade Switches, Cisco IP SLA , Cisco Security Appliance, Colubris Wireless, Fortigate, Funkwerk, IronPort Email Security & Relay Appliances , Juniper, LTM Virtual Server, MRV wireless , Netasq, NetScreen, Nortel, Raytalk Wireless, SourceFire HARDWARE, CRM, HELPDESK, LDAP and many more Section 2 12:44:25

27. Reacts to alerts

28. Processes data to deliver meaningful information

29. Manages tasks and requests

30. Interacts with a 24 x 7 Call Centre

31. Centralized high skills base to react to security alerts

32. Skills allocated per client for intimate knowledge of customer environmentSection 2 12:44:25

33. Section 3 How we do it 12:44:25

34. How we do it Section 3 12:44:30

35. Operational Impact Value Cost Section 3 12:44:30

36. Operational Impact

38. Deliverables, Timelines and Responsibilities are agreed on with clientSAMPLE Section 3 12:44:33

40. Deliverables, Timelines and Responsibilities are agreed on with clientSection 3 12:44:33

42. What is the expected completion date

43. When was actual completion dateSAMPLE Section 3 12:44:33

45. Updates are communicated and discussed during meetingSAMPLE Section 3 12:44:36

47. Detailed Vulnerabilities Report

48. Overall Malicious Services Summary

49. Detailed Malicious Services Report

50. Detected Administrator Accounts

51. Overall Company Installed Applications Summary

52. Detailed Applications Report

53. PCI Non-Compliance Summary

54. Detected Shares and Share ContentSection 3 12:44:36

56. Detailed Configuration Changes report

57. Network Inventory Report

58. Network Summary Report

59. Protocols and Credentials ReportSection 3 12:44:40

60. How we meet Technical Buying Criteria Section 3 12:44:40

61. Section 4 How we meet the supplier Criteria 12:44:40

62. Supplier Criteria Section 4 12:44:43

64. 7 Graduates including BSC Masters in Data and Information Security

65. 1 Staff member with Oxford Tertiary education

66. 3 Professional Engineers, Electronics

67. 5 Staff with International Experience

68. Assign consulting resources to align with our re-iterative process

69. Monitor

70. Measure

71. Incident Management

72. Policy RefinementSection 4 12:44:43

73. International Publications World Comp and IEEE accepted publications We have been invited to publish and present two international academic papers at WORLDCOMP ‘08 and ’09 held in the United States. World Congress in Computer Science, Computer Engineering, and Applied Computing (WORLDCOMP). WORLDCOMP is the largest annual gathering of researchers in computer science, computer engineering and applied computing. It assembles a spectrum of affiliated research conferences, workshops, and symposiums into a coordinated research meeting held in a common place at a common time. This model facilitates communication among researchers in different fields of computer science and computer engineering. IEEE Published article can be found at: http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4696131 Section 4 12:44:43

75. Aristocrat

76. SBV

77. SAC

78. Gijima AST

79. Code Online

80. L@Wtrust

81. Bytes Technology Group

82. South African Post Office

83. South African Post BankSection 4 12:44:45

85. Being a PTY company, we are not governed by the same financial performance criteria as a listed entity and therefore are able to reinvest profit in growing the company.

86. Being a service consultative based organization with staff bonus schemes and equity participation opportunities we have been able to attract and retain key personnel in this country who otherwise would be tempted to look abroad.

87. Our differentiation in the market will always be the quality of our staff and we therefore we invest heavily in education, awareness programs and training.Section 4 12:44:46