Bookmark Email Print page

Online threats

Are you ready for the world of web warefare?

Your brand new internet site is up. A world of customer interaction and transaction capability at your door. Your site provides detailed, sensitive information, and high value transactions. Behind the scenes, invisible to the rest of the world, your infrastructure of servers, databases, your network and an arsenal of applications are all meant to work together seamlessly to deliver a high traffic site, available 24/7, with real-time information and transactions.

The ability to conduct business online is essential. The web offers your customers and other business partners the ability to interact with you in a versatile and sophisticated manner and it needs to be protected.

Your site and these relationships can be compromised at any time. Websites are riddled with vulnerabilities making them susceptible to attacks such as cross site scripting (XSS), database (SQL) injection and denial of service (DOS) attacks. These attacks can pose a number of risks to your business; attacks can potentially access your backend database, steal your organisation's intellectual property or corrupt your data.

Websites need to be developed with security in mind. Applications need to be secured, databases configured with the appropriate security controls and servers need to be adequately patched and hardened.

Our experts have worked with numerous organisations to secure their web presence through:

  • Ethical hacking to uncover existing vulnerabilities
  • Review of source code for programming weaknesses and inefficient code
  • Testing of business logic within web applications to determine exposures
  • Database reviews
  • Review of server and network device configurations
  • Assessment of monitoring and response capabilities
  • Review of the development environment
  • Providing standards, policies and procedures to appropriately develop, secure and sustain your infrastructure

Talk to us about security and privacy at your organisation.

Talk to the team

  • Ian Perry
    Enterprise Risk Services Partner
  • Faris Azimullah
    Enterprise Risk Services Partner
Stay connected:
Get connected
Share your comments

 

More on Deloitte
Learn about our site