Security Professional Services

Security Assessments Vulnerability Assessment IT Security Assessment Firewall Migration Custom Professional Security Services Security Professional Services Product Portfolio Proprietary and Confidential9

The Need for Security Professional Services

What keeps you up at night? How do I Enable the Business? Need to leverage technology in order to make people and business more productive How do I Reduce Costs? Need to reduce IT capital and operating expense in order to increase overall profitability How do I Manage Risk? Need to ensure enterprise data is secure from internal and external threats and plan for any business disruption

Typical Business IT Security Challenges  How can I ensure my business assets are secure?  How do I know if my network defenses can be breached?  How is my current security program performing?  Do we have the appropriate security measures in place?  Are my security policies up to date?

Security Statistics Point to Managed Services “In 2010, security researchers uncovered close to 100,000 new malware samples per day – more than one per second! More alarming; most organizations are not prepared or staffed to handle these new and numerous threats.” – Emerging Cyber Threats Report 2011, GTISC “Approximately 80% of small businesses that experience a data breach go bankrupt or suffer severe financial losses within two years of a security breach.” – Small Business Computing Magazine “71% of security breaches are perpetrated by authorized users” Security related image FBI Computer Crime Study

Why do you need Security Professional Services from EarthLink Business?

Security Professional Service Needs Concerns about employee security awareness Public facing IT infrastructure (Internet facing) Limited staffing with no time for patches and updates Governed by compliance or government regulations Stores confidential customer information Remote and mobile workers Concerned about secure web application access and general browsing EarthLink Security Solutions

When was the last time you conducted an independent, 3 rd party Vulnerability Assessment? Vulnerability Assessment Needs Ensuring your mission critical IT infrastructure is safe from internal and external security threats Never or more than 6 months ago: Then you are potentially vulnerable to external security threats. An expert, independent, 3 rd party assessment will give you peace-of-mind that your business is protected. Are you confident that you are protected against new threats from the Internet?

Are you constantly making internal and external changes to your IT environment? IT Security Assessment Needs Ensuring your mission critical IT infrastructure is safe from internal and external security threats IT environment changes introduce risk and if not properly assessed, risk can turn into exposure. EarthLink can perform compliance gap assessments to identify IT process gaps in customer IT environments Are you regulated by HIPPA, PCI or any other compliance requirements?

Firewall Migration Needs EarthLink can install and configure a firewall for customers under the following scenarios Customers migrating their firewall protection from: Another Service Provider Change in Equipment Manufacturer New solution architecture Customers migrating their firewall protection from: Another Service Provider Change in Equipment Manufacturer New solution architecture

Any professional security service not outlined as a standard EarthLink product. Items may include forensics and data recovery, security awareness training, operational and compliance assessments and disaster recovery planning. Custom Professional Security Needs EarthLink has experts to address your enterprise security needs

Features & Benefits

Identify known network, operating system, web application and web server exploits or vulnerabilities with the use of automated tools. External vulnerability scans give customers an overall picture of the vulnerabilities present on their external network and assist in vulnerability risk management. 14 Vulnerability Assessment An objective, qualified and certified 3rd party examines customer networks from the “outside” to identify security vulnerabilities posed by: Improperly configured servers Open server ports that are not needed for specific business purposes Services running on servers that are not needed for specific business purposes Website code that can be exploited for malicious purposes Recommendations are presented to eliminate or mitigate the identified security risks.

Evaluate organizations security framework against common industry standards as well as other companies of similar size, industry and geography. Overall assessment helps organizations reduce risk exposure, protect information assets and limit the impact of security-related events on business activity. 15 IT Security Assessment Evaluates 13 priority information security risk areas Physical Security File Backup & Recovery Logical Security End Point Security Servers & PCs Wireless Network Security Network Infrastructure AV, Spyware, Spam Security Policies, Procedures, Practices Social Engineering Internal Network Vulnerabilities Software Security External Network Vulnerabilities Consultant driven utilizing EarthLink partners Assessment identifies gaps for potential upsell of IT services

Professional services led firewall migrations from customer equipment to EarthLink Managed Premises firewall or Hosted Network Security solutions. 16 Firewall Migration Service 4 Migration Categories Re-architecture Migration Customer premise firewall migration to any EarthLink standard firewall product Provider Migration Third party network, data center or premise firewall migration to any EarthLink standard firewall product Vendor Migration SonicWALL, Juniper, Cisco, CheckPoint, and others to EarthLink’s premise based firewall product (Fortinet) Security Appliance Migration Migrating individual UTM components to a single firewall managed by EarthLink

EarthLink professional security services, including: forensics and data recovery, security awareness training, operational and compliance assessments and disaster recovery planning. 17 Custom Professional Security Services Some Benefits of IT Security Professional Services Enables customers to proactively address security issues before they impact business. Provides a business grounded plan to improve overall security Identifies the potential impact of both internal and external vulnerabilities. Helps to meet regulatory compliance requirements

Peace of Mind Minimize risk and protect your business’s mission-critical information. Save Money Lower operational costs and upfront capital expense associated with managing, monitoring and securing your infrastructure. Make your Life Easier Comply with government and industry regulations though proactive security monitoring, documented security policies and procedures. Security Professional Services Benefits

Delivers Value to Your Business Protecting your mission-critical data Reducing IT expenses Increasing productivity Ensuring compliance EarthLink Security Professional Services