COMPANY HISTORY

Overview
Information Security has become a key concern for organizations today. There is new emphasis on this area both in the private and the public sector, in light of world developments and the increased vulnerability due to increasing interconnectivity. However, this field has been plagued by intentionally created mystery, hype and fear. The commonly used term for this is FUD (Fear, Uncertainty and Doubt). It has served the interest of all involved in the Infosec community to hype the dangers and complicate the solutions to the security concern. Every party with a vested interest from anti-virus and security companies to academic bodies to government agencies have hyped the threat, while providing weak or extremely complicated solutions to the problem. Established best practices are difficult to implement, as they are vague and broad in concept. Technology solutions also offer no real answers and provide no substantial guarantee of security. As a result the real threats that companies and government agencies face are not being addressed in a meaningful way.

It is in this environment that Crimson Security Corp consulting was started. This firm aims to provide consulting services to organizations that focuses on their particular security needs. Crimson Security offers solutions that maximize efficiency and provide the best ROI, while achieving a substantial level of security. Most security professionals realize that many of the existing security processes used and much of the security technology available today is either inappropriate to their situation or excessive in relation to the risk faced.

Background
Crimson Security is run by a group of certified security professionals with several years of experience on both sides of the security industry. We have worked at security technology and consulting firms as well as in organizations where we have been tasked with determining the appropriate security posture and solutions, given requisite business processes, to ensure a safe, but efficient, operation. We are thus uniquely positioned to provide consulting as well as hands-on implementation services that focus on preventing or reducing unnecessary investment in technology and people, while maximizing security for the organization.

Crimson Security Professionals receive & recommend training from the following:

www.isc2.org
www.sans.org
www.isaca.org