Re: Recommendation for a comprehensive security audit

[Thugzclub <thugzclub () googlemail com>]

Why is your preproduction environment is scope? It does not appear to be in scope at all.

Regards.



On 10 Jul 2012, at 15:56, Security <security () ignorable com> wrote:

> Hello all,
>
> We are an online payments solution provider start-up in the UK and are about to roll out our first web application, 
> using fairly standard technologies like MySQL, Apache, Java, NodeJS, Flash, Flex and so forth.
>
> What we are looking for is a comprehensive security audit encompassing our production as well as development and 
> office environments, not just from a technical perspective but also in regards to physical security. This also needs 
> to include compliance testing for PCI, FSA and possibly others.
>
> Can someone recommend any companies for this, or alternatively a forum with reviews of such companies?
>
>
> Many thanks in advance,
>
> Andre
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------