Castleforce IT Consultancy Ltd are IT Security and Business Continuity specialists helping businesses choose the best products that meet the diverse requirements needed to protect against the current threat landscape and which satisfy the specific requirements of compliance guidelines and regulations.

---

Why is computer forensics so expensive ?

From listening to our clients we understand that digital forensic is very crucial in today's legal proceedings, the cost of contracting qualified forensic experts is treated with extreme caution as it has been known for costs to be excessive. It has become apparent that unless the value of the litigation is of considerable significance, then IT forensics is only viable to the case. Given that the majority of communication in the modern world is electronic then computer forensics is essential.

Does it really need to be so expensive ?

Evidence IT believe that if we are contacted at the outset of the case, we can provide a cost effective evaluation, preliminary searches and honest accurate advice on the best course of action regarding digital forensics. To put this into context, below is a quote from one of our clients.

“What a refreshing approach, we achieved the information we required, a well documented review that assisted us and our client in making decisions as to how critical the computer data would be in the case. This service just makes sense, why spend £10K at the outset when you only need to spend £2K. Computer forensics evidence is now present in the majority of cases, being able to understand it and use it without depleting budgets is needed, not just by us, but by all litigation departments”.

Evidence IT client May 2010

How do we reduce the cost for Computer Forensics for UK law firms

SAFEmail

Labelling, Protective Marking and Release Control for Secure Messaging

Email is the primary collaboration tool in most organisations, so it’s no surprise that it’s a common source of information leakage, with much data loss caused by user negligence. Boldon James SAFEmail ICS (SAFEmail) puts labelling at the heart of data loss prevention by giving users the option to apply relevant visual labels to Microsoft Outlook email messages, which are expanded by SAFEmail into the email metadata.

SAFEmail labels enforce the organisation's rules on handling and release of email, automatically invoking other technologies such as encryption or rights management.

The result is increased user awareness of the sensitivity of information, the ability to provide evidence that applicable regulations have been met and the opportunity to boost the return on your investments in encryption, archiving & storage, e-discovery, DLP, information rights management and ERDMS.

---

   

Stonegate get EAL4+ certification from CESG

StoneGate Firewall/VPN has received the Common Criteria Evaluation Assurance Level EAL 4+ certification. The EAL 4+ is the highest commercially feasible certification level.

The Common Criteria certification is an independent security standard that is globally ratified in 26 countries. More and more organizations with high security demands rely on the certification when making investment decisions. Common Criteria certified products have undergone and passed extensive and rigorous independent third-party testing, giving customers assurance that the product meets the security requirements defined in the Security Target evaluation document.

The StoneGate Firewall/VPN version 4.2.2, Build 5708.cc3.1 was tested and validated by British Telecom commercial evaluation facility under supervision of Communications-Electronics Security Group (CESG) Certification Body in UK.

StoneGate Firewall/VPN Version 4.2.2 Build 5708.cc3.1 running on the StoneGate appliance models FW-310, FW-1020, FW-1030, FW-1050, FW-1200, FW-5000 and FW-5100

Stonegate CESG Certification Report No. CRP249 MR1 March2010

Threat		Low			High
Virus
Spyware
Spam
Web/IM
IPS/Patch Mgmt
Data/System Mgmt

Filters:

STATION TYPE PC/Laptop Server Mail Server Gateway Smart Phone/PDA
PLATFORM TYPE Apple Macintosh Appliance Firewall / VPN Hosted Service Linux Desktop Linux Server Lotus Notes / Domino Mail Protocols Microsoft Exchange Microsoft Mobile & Symbian OS Microsoft Small Business Server Microsoft Windows Microsoft Windows Server Novell Netware Other Mail Server Other Server Web Protocols Wireless
BRAND PREFERENCE Assuria AwareGO Boldon James Check Point Extreme Networks Lumension Mycroft Talisen Stonesoft Trend Micro Watchguard

Virtual Desktop Infrastructure (VDI)

We can provide a full UK & US Government approved Secure Virtual Desktop environment that is currently being used by the aerospace and defence organisations in the UK and USA.  The platform can restrict the flow of information that individuals can access from any web browser over the internet and is ideal for remote access.   

Mycroft based solutions have CESG approval for:

Processing and holding information and data up to ‘RESTRICTED’

'RESTRICTED' over the Internet (ROTI) with approved encryption 

The Mycroft Secure Gateway can be used for secure Virtual Desktop Infrastructure (VDI) with restricted access to applications such as MOSS / WSS, Outlook, and pretty much any application.  The possibilities are endless and it's already being used by companies that require a fully secure environment. 

• Virtual Desk Top
• Collaboration Tools 
• Secure Email
• Video Conferencing
• Data Storage
• Corporate Network Access
• Test/ Development environment

Want to know more about Mycroft Talisen Secure Gateway? 

ISO/IEC 27001 Consultancy

ISO/IEC 27001 is the de-facto industry standard for implementing effective Information Security across an organisation.  The standard does not just look at IT Security as it also covers Human Resources, Records Management, Business Continuity, Physical Security and Risk Management.

Castleforce can help organisations implement all or part of the ISO/IEC 27001 standard depending on the requirements.  The services provided range from an initial GAP analysis to gauge your organisation's current compliance through to the implementation of the standard.  If you are close to a certification audit Castleforce can undertake a pre-certification audit to ensure you are ready for the final assessment.

Business benefits include:

• Being recognised by customers and trading partners as treating Information Security seriously
• The ability to meet the ever growing Information Security requirements identified in tender documents
• Greater understanding of Information Security risk to your organisation
• Security effort is tied to risks therefore reducing unnecessary efforts
• Greater control over technology and business processes
• Opportunity to increase efficiency through the improved understanding of business processes
• Compliance with legislation and standards

For more details on how Castleforce can help your organisation with ISO27001