Security Matters

SSPPRRIINNGG // SSUUMMMMEERR 22000099TThhee ccoorrppoorraattee nneewwsslleetttteerr ffrroomm BBooxxiinngg OOrraannggee

SSEECCUURRIITTYYMATTERS

Boxing Orange Working with business to maximise ITsecurity budgets.

www.boxingorange.comin association with Webscreen

In this issue:Welcome 2

News Round-up 3

Customer Focus - Nisa-Today's 4

Ask the Expert 5

Boxing Orange SIEM Services 6/7

Government and Public Sector Focus 8

Customer Viewpoint - Cefas 9

Partner Focus 10

Staying Secure 11

SECURITY MATTERS

SSPPRRIINNGG // SSUUMMMMEERR 22000099

BOXING ORANGE LTD5 Beaconsfield Court, Garforth,Leeds LS25 1QH UK

T: 0113 232 2330F: 0113 287 0124E: [email protected]: www.boxingorange.com

2

Boxing OrangeWWEELLCCOOMMEE

Hello and welcome to theSpring issue of Boxing Orange’snewsletter, Security Matters.

These are challenging times andbelt-tightening is the order of the dayfor many businesses. But with cyber-crime predicted to increase due tothe downturn, companies cannotafford to risk compromising theircorporate security particularly asnew regulations and compliancerequirements are putting addedpressure on their systems.

With this very much in mind we havemade cost savings and RoI theoverriding theme for this issue and Iam delighted to take this opportunityto announce our exciting upgradedSIEM service which will form thecore of our security service offeringgoing forward. Developed afterextensive world-wide research andfeedback from our customers, the on-demand service offers immediatelymeasurable cost benefits as well asenhanced security particularly forbusinesses with complex networksecurity systems to monitor.

Together with our accredited securityconsultancy services, such as PCIcertification and penetration testing,and strong partnerships with theleading security vendors, we believethat this development will put BoxingOrange clearly ahead of the pack ofsecurity service providers in the UK.

Our regular “Ask the Expert” featureputs the spotlight once again on oneof our resident security solutionsspecialists. This time StuartWilliamson takes an in-depth look atNetwork Access Control, offeringpractical advice drawn from actualcustomer experiences.

If this is something you are currentlylooking at, Stuart would be happy todiscuss the best way ofimplementing NAC to meet your ownspecific requirements.It may be an obvious comment butclearly we are very thankful to all ourcustomers for their continuedbusiness, many of whom we haveworked with since the company waslaunched – a clear testament to ourteam. It is a privilege and pleasure toplay a critical role for so many leadingindustry names.

Last, but by no means least, due toour increasing portfolio of governmentprojects, we have also included aspecial section that focuses on thesecurity needs of the public sector,which we plan to make a regularfeature of future issues. This time we take a look at thesecurity implications associated with the use of the GovernmentConnect network, which is now thestandard communication system for all government departments andlocal authorities.

I hope that you find Security Mattersan informative and interesting readand I look forward to hearing anycomments or ideas you may have for future issues via our feedbackform on our web site.

RegardsJarrod PotterManaging DirectorBoxing Orange

00111133 223322 22333300 iinnffoo@@bbooxxiinnggoorraannggee..ccoomm

Printed on 9 Lives 80 FSC certified coatedpaper from responsibly managed forests with an 80% recycled fibre content.

0113 232 2330 [email protected] 3BBOOXXIINNGG OORRAANNGGEE / SECURITY MATTERS wwwwww..bbooxxiinnggoorraannggee..ccoomm

New business wins New to Boxing OrangeBoxing Orange is proud of the close working relationships with worldleading security technology vendors that have been built up over the past 8 years and we are continually reviewing the emerging technologyscene to ensure we can offer best of breed products in our portfolio.Recent additions to Boxing Orange’s product partner list include –

An enterprise class technology designed to pro-actively maintain optimum security standards across the entire network infrastructure

The world’s leading intrusion detection and prevention system

Innovative, world-class mobile memory devices

Cisco IronPortCisco IronPort email security defence solutions include anti-spam as well as virus and phishing protection

For more information on any of these or our full rangeof security products call 0113 232 2330

Boxing Orange’s customers cover the full range of commercialand public sector organisations including Top 1000international businesses. Understandably, given the nature ofwhat we do for them, most prefer to remain anonymous buthere are a few examples of the type and scale of projectsundertaken by Boxing Orange during the past year…

SIEM deployments for:A major UK central Government department A large financial institution

PCI compliance projects for:An international retailerA leading car manufacturer A petrochemical company

Cisco NAC deployment for:A major gaming company

A managed Tripwire deployment for:A central Government department

An anti-Phishing solution for:Another financial institution

Thanks for the business… you know who you are.

NNeeww ffaacceess aatt BBooxxiinngg OOrraannggeeBoxing Orange continues to grow despite the challengingtimes and is delighted to welcome more new faces to theteam to support our aggressive sales and marketing plans for 2009.

We are continually on the look out for experienced andenthusiastic people to help take the business forward and are particularly keen to hear from individuals with specialistsecurity project management skills as well as enterprise andgovernment sales experience. If you feel you fit the bill sendus your CV to [email protected]

STRICTLY NO AGENCIES

4

CCUUSSTTOOMMEERR FFOOCCUUSS

Nisa-Today’s, the UK’s largest buyingand distribution service for conveniencestore groups as well as independentretailers and wholesalers, is anorganisation owned by its memberswith the principal objective being to useits combined buying power to securethe best prices on branded and ownbrand products and provide a highlyefficient nationwide supply chain andlogistics operation.

Through its membership Nisa–Today’srepresents over 5,000 retail stores andaround 270 wholesale depots covering thewhole of the UK. The combined turnover ofthe group positions the company as one ofEurope's largest independent buying groupsproviding the negotiating ‘muscle’ thatensures the widest range of quality productsat competitive checkout prices forcustomers and at the same time creating alevel playing field for its members.

The Boxing Orange solution, NT Net, uses adedicated Virtual Private Network (VPN)based service created exclusively for Nisa-

Today’s members. Using a standard PC andbroadband connection to Boxing Orange’ssecure data centre, the VPN provides asecure tunnel through which data istransmitted between the member’s EPoSsystems and Nisa-Today’s central orderprocessing servers.

In addition to the VPN service the systemincludes a secure high speed connection for general internet access. For members with multiplelocations there is also theoption to utilise the VPN serviceto maintain secure inter-storecommunication, stockmanagement, central orderingas well as credit cardtransaction processing.

“The fact that NT Net can beaccessed without significantinvestment in new hardware or software was a big factor in adopting the Boxing Orangesolution. With the additional benefits of high-speed internet

access, managed security services includingbest of breed content filtering and DDoSprotection, the whole package provides a safe and productive web environment tounderpin the members’ business operations.”

David Morris, Nisa-Today’s Head of IT

Boxing Orange Threat WatchTTHHRREEAATT WWAATTCCHH

*Source: http://www.cgisecurity.com/about.html


An overview of all the latest vendor andanalyst reports into the security threatenvironment reveals an overwhelmingconsensus view that security is still a growing problem for network managersparticularly as attacks are increasingly being driven for financial gain rather than hacker peer group kudos.

During 2008 there have been continualreports in the media of the proliferation of malicious botnets. As yet to be fullyunleashed, many industry watchers arepredicting a massive increase in co-ordinated attacks in 2009 with identity theft and denial of service top of the list of the major concerns.

According to independent web security industry watcher cgisecurity.com, with the exception of vulnerability exploits, all the major threat categories are set to at least continue at the same rate or increase in the next 12 months.

Threat Predictions for 2009*• Malicious Insiders - Rising Threat • Malware - Steady Threat• Exploited Vulnerabilities - Weakening Threat • Social Engineering - Rising Threat • Careless Employees - Rising Threat • Reduced Budgets - Rising Threat• Remote Workers - Steady Threat • Unstable Third Party Providers - Strong Rising Threat• Downloaded Software Including Open Source & P2P Files - Steady Threat

5BBOOXXIINNGG OORRAANNGGEE / SECURITY MATTERS wwwwww..bbooxxiinnggoorraannggee..ccoomm

*Source: http://www.cgisecurity.com/about.html

AASSKK TTHHEE EEXXPPEERRTT

What exactly is NAC? Network Access Control as defined byForrester Research is a “mix of hardware andsoftware technology that dynamically controlsclient system access to networks based ontheir compliance with policy." Put more simply this means that deployingtechnology such as Cisco's NAC provides ahighly secure and extremely cost-effectivemethod of attaining and more importantlymaintaining secure access to the corporatenetwork. Whether via the corporate LAN -wired/wireless, public internet VPN or thirdparty networks, NAC can control access andhelp police the clients that connect to thenetwork. NAC can automatically place clientsinto a quarantine or remediation networkwhere they can update their key securityresources such as firewall, anti-virus orencryption software. Once the client is up todate and in line with a security baseline theycan access the network. A NAC solutionprovides network and security professionalswith an effective prevention rather thanexpensive and time consuming cure.

What benefits would my organisationrealise by deploying a NAC solution?• Prevent unauthorised network access• Secure corporate and non-corporate assets• Reduce vulnerability-based exploits by

quarantining devices before they access the network

• Help ensure corporate policy compliance• Minimise inside threats – both intentional

and non-intentional

What security functions are included inthe NAC environment? • Authentication• Endpoint scans• Policy compliance checks• Policy creation• Enforcement • Management

How does NAC work in practice? NAC products scan computers and otherdevices before they get on the network todetermine whether they possess a securityposture in line with corporate policy. For example NAC will look at:• Is virus-scanning software up-to-date? • Is the operating system patched to the

desired level? • Is a personal firewall in use? • Are the devices’ registry settings correct?The NAC process requires a policy enginecapable of matching scan results to policiesto see if the device is qualified to gain access.The network must contain devices such asswitches, routers, firewalls and servers thatcan enforce the policy engine's decision andtake the relevant actions. These actions canbe multi-level: • To block access to non-compliant devices• To restrict access to certain resources e.g.

provide internet access only • To allow access to an isolated network

segment, sometimes referred to as aremediation network, where securityfunctions can be brought up-to-date tomatch the current policy.

How does NAC work with IP devicesthat do not have an operating system? Devices such as printers and IP phones havelimited functionality when compared to PCdevices and as such, standard PC NACpolicies cannot be applied. NAC copes withthese devices by allowing the use of ‘whitelists’ policies. These lists are based on uniquedevice attributes such as MAC addresses toallow a NAC policy to be implemented.

Can other types of security productsplay a role in a NAC environment? Most definitely yes, as an example,antivirus/antispyware software can play amajor role in Cisco's NAC environment bydelivering status information to Cisco's Trust Agent. The agent gathers data from the client’s software and other software ondesktops and laptops to develop a profile of the computers trying to access thenetwork. Many vendors are supported byCisco’s NAC products.

Network Access ControlNetwork Access Control (NAC) has recently joined the growing list of TLAs (three letter acronyms) that abound in the securitysector, but what does it actually mean and is it something that you need to consider for your organisation? Stuart Williamson,Service Architect at Boxing Orange provides some answers to the questions we frequently hear from our customers…

0113 232 2330 [email protected]

Stuart WilliamsonService ArchitectBoxing OrangeTel: 0203 056 4002

6 7BBOOXXIINNGG OORRAANNGGEE / SECURITY MATTERS wwwwww..bbooxxiinnggoorraannggee..ccoomm

SSEECCUURRIITTYY MMAATTTTEERRSS

Boxing Orange SIEM Features

• Secure client dashboard

• Advanced correlation and analysis of multiple-appliances

• Provides an instant “snap-shot” view of thecorporate security posture

• 24/7 access to expert securityconsultancy

• Leverages over 50 man-years ofsecurity expertise

• Reduces management overhead

• No costly client software to purchaseand maintain

• Make better informed tactical andstrategic security decisions

• Demonstrate compliance with industry orgovernment regulations

• Prioritise security incidents

For more information on our full range of securityproducts call 0113 232 2330 or 0203 056 4002,

email [email protected] or visit www.boxingorange.com

Maximising Security Technology Investments


Boxing Orange SIEM Services

Although network firewalls, IPS and DDoS mitigation technologies provide someprotection for businesses, networks have become more complex and cyberattacks are constantly evolving to find ways of circumventing these establisheddefence systems. Monitoring and managing this array of point securitysolutions has now become a significant element of the networkmanagement budget for many organisations, particularly in terms ofconsolidating and interpreting the masses of information eachappliance can produce on a daily basis.

The Boxing Orange Security Incident and Event Management(SIEM) service has been designed to provide a cost-effectivesolution maintaining maximum security posture whilst remainingcompliant. The service has evolved over the last 8 years anddraws on experience gained from monitoring millions ofsecurity events for 100’s of clients, constantly updated withnew intelligence gained from managing thousands of complexdevices and networks.

Using advanced correlation and analysis techniques the systemprovides real-time event reporting and incident alerting, basedon data from any of over 300 different vendor solutions in thenetwork, alerting the appropriate person in the organisation toenable timely remediative action to be carried out.

The service can be tailored to the exact needs of the organisation,providing a platform to support, monitor and control regulatorycompliance standards such as PCI, MiFID and ISO 177799.

Customers also have 24/7 access to Boxing Orange’s team of certifiedsecurity experts, providing an additional layer of consultancy and advice onthe appropriate action to take, removing the need to maintain a costly in-housesecurity resource.

www.boxingorange.com

0113 232 2330

PCI

ISO

CLAS

Security

BC

P

Risk managem

ent

Fraud

PCI/ASV

P

enet

ratio

n

Fo

ren

sics

Che

ck

DSS

Standards & Policy

Audit/Review

& m

odelling

Detection/Prevention

Tes

ting

C

REST

ADVISORY & PROFESSIONAL SERVI

CES

Firewall

IPS/IDS

DDoS VM NAC

HIPS

encr

ypti

on

conte

nt filt

ering

Prevention

SIEM

W

LAN

Em

ail

Em

ail a

nd Web

Data Leakage

MAN

AGED SECURITY SERVICE

S

pr

oduct

s

Policy network analysis &

preven

tion

legal compliance

GIAC Analyst

Res

ilien

ce30

0+ V

endor

Risk Management Real-time

Fraud

detection

Regulatory &

24/7/365

Sc

alab

ility

www.boxingorange.com0113 232 2330

SIE M

The development of initiatives such asthe Government Connect programme isa clear signal that this is being takenseriously. Providing a pan-government,accredited and secure networkbetween central government and everylocal authority in England and Wales, itis high on the agenda of most publicsector IT professionals.

Although the network, known as GCSx(Government Connect Secure Extranet)is not yet mandatory, most of the majorgovernment departments have given itpreferred status as the secure methodfor transfer of data between themselvesand UK local authorities. In April thisyear they will also begin the phase outof alternative transfer media such asthe internet and postal services,making normal operations very difficultfor any local authority that does not meetthe Government Connect security criteria.

To access the GCSx network, local authorities and governmentdepartments must be compliant withthe Code of Connection (CoCo) whichcovers a list of security controls thatmust be in place before their GCSxcircuit can be activated.

Through its comprehensive range ofprofessional security services andstatus as a PCI ASV, Boxing Orangeprovides public sector organisations a one stop shop for all their securityrequirements from initial consultancythrough to design, installation,management and technical supportservices to meet many of the criticalrequirements included in the CoCo standard.

Boxing Orange has extensiveexperience in the public sector gainedthrough the provision of managedsecurity services for several governmentdepartments and public sectororganisations including Cefas and theHuman Tissue Authority.

SSPPEECCIIAALL FFEEAATTUURREE

With high-profile cases of data leakage frequently hitting the headlines,network security is very much a hot topic for the public sector.

Government and Public Sector Focus

8

To access the GCSxnetwork local authorities and governmentdepartments must becompliant with the Codeof Connection (CoCo)which covers a list ofsecurity controls that must be in place beforetheir GCSx circuit can be activated.

For further information, contact us on0113 232 2330 or 0203 056 4002


CCUUSSTTOOMMEERR VVIIEEWWPPOOIINNTT -- CCeeffaass GGOOVVEERRNNMMEENNTT CCAASSEE SSTTUUDDIIEESS

Q. What were your mainrequirements when designing yournetwork infrastructure?

A. The main driver for redesigning thenetwork was to increase the throughput toour specialist laboratories at Weymouthand Burnham-on-Crouch, while off-loadingthe internet browsing traffic to local ADSLlinks, which would also offer us resilientlinks from the specialist laboratories to themain Lowestoft laboratory, which wasplanned to have a resilient infrastructure tothe internet, consisting of dual links,switches and firewalls.

Q. Why did you choose an MPLSnetwork architecture?

A. We were running a WAN based oninternet VPNs, which were cost effectivebut had the downside of not being able tooffer a fast round time trip, especially forWeymouth, which is the more distant site,approx 68ms round trip for a ping. The MPLS offered us a faster guaranteedround time trip, approx 40ms.

Q. Have you had many issues sincethe network went live?

A. We had bandwidth problems, the 1Mbslinks to the labs were being fully utilisedand slowing some mission criticalapplications. With advice from BoxingOrange we installed PacketShapers toprioritise the critical applications and timecritical user interactive applications overnon-critical and non-user interactiveapplications (e.g. domain replication,SMTP traffic between Exchange servers).We also installed the acceleration andcompression utilities, which in effect givesus more bandwidth.

Q. What measures have youimplemented to help protectsensitive data on the network?

A. The main IT security measures beingtaken are the installation of Check Point’sPointsec full disk and removable mediaencryption utilising the FIPS 140encryption keys. We have also upgradedfrom Symantec’s AV product to theSymantec Endpoint security product. This will enable us to lock down peripheraldevices being attached to Cefas PCs.

Q. How much has the Boxing Orangerelationship helped in ensuring theoptimal performance of the network?

A. We have a very good relationship withthe account managers, project managersand engineers at Boxing Orange, almost apartnership. Without this type ofrelationship our infrastructure would not beoperating to its optimal performance.Boxing Orange advises us on both networkconnectivity and security systems. We inturn have to evaluate this advice anddiscuss with the team at Boxing Orange onwhether it is fully appropriate for our needsand act within our budget limitations. The Boxing Orange team are always helpfulwith further advice and assistance on howwe can achieve our goals.

Q. What plans have you got for futuredevelopment of the network?

A. We are currently upgrading theWeymouth link to 2Mbs. As we have closedthe Burnham-on-Crouch lab we now havethe spare capacity on the Lowestoft link.We are also investigating using a secondMPLS link at both Lowestoft andWeymouth for replication of our RDMSwhich is currently under development.

RRiicchhaarrdd PPaaggee iiss rreessppoonnssiibbllee ffoorr mmaannaaggiinngg tthhee IITT iinnffrraassttrruuccttuurree tthhaatt ssuuppppoorrttss CCeeffaass’’sstteeaamm ooff 555500 eennvviirroonnmmeennttaall sscciieennttiissttss aanndd aaddmmiinniissttrraattiivvee ssttaaffff llooccaatteedd aaccrroossss iittss 22 mmaaiinnllaabboorraattoorriieess aanndd aa nnuummbbeerr ooff ssmmaalllleerr ooffffiicceess aaccrroossss tthhee UUKK.. AAnn iimmppoorrttaanntt ggoovveerrnnmmeennttrreesseeaarrcchh oorrggaanniissaattiioonn,, CCeeffaass ppllaayyss aa ssiiggnniiffiiccaanntt rroollee iinn hheellppiinngg ttoo mmaannaaggee aanndd pprreesseerrvveetthhee UUKK’’ss aanndd tthhee wwoorrlldd’’ss ddiivveerrssee aaqquuaaccuullttuurraall eennvviirroonnmmeenntt..

Cefas, the Centrefor Environment,Fisheries andAquacultureSciences, is aninternationallyrenownedaquatic scientificresearch andconsultancycentre. It aims tobe the primesource of highquality scienceused to conserve

and enhance the aquatic environment. It has a huge range of resources andexpertise, with more than 500 staff basedin 4 UK laboratories including its ownocean-going research vessel. Boxing Orange has been managing theCefas MPLS network since 2006 and iscontinuing to work with Boxing Orange toadd new security technology to enhance its network infrastructure.

The Human Tissue Authority, HTA, is theUK government funded organisationresponsible for regulating the removal,storage, use and disposal of human bodies,organs and tissue for research,transplantation, education and training setup under the Human Tissue Act and isalso responsible for approving donation ofsolid organs and bone marrow from livingdonors. Boxing Orange was contracted tocarry out a redesign of the corporate ITinfrastructure including conducting adetailed security audit prior to theinstallation and management of HTA’scommunication network.

9BBOOXXIINNGG OORRAANNGGEE / SECURITY MATTERS wwwwww..bbooxxiinnggoorraannggee..ccoomm0113 232 2330 [email protected]

For further information, contact us on 0113 232 2330 or 0203 056 4002

10

In response to customer feedback, Boxing

Orange has recently added Webscreen

based DDoS mitigation to its range of fully

managed security services supported by the

Security Operations Centre. Offering a full

monitoring and management service for

critical, high DDoS-risk web sites, Boxing

Orange is able to provide round the clock

manual back-up services for Webscreen

deployments, ensuring availability for

customers during key trading periods.

Online retailers and gaming companies are

often targeted during their traditional peak

periods when they could potentially lose

£millions in lost revenue if they are taken

off line.

A DDoS managed service from Boxing

Orange can add an extra layer of security

and peace of mind at these critical times.

For further information, call us now:

0113 232 2330

PPAARRTTNNEERR FFOOCCUUSS

Webscreen TechnologyBoxing Orange Extends Range of DDoS Services

BBooxxiinngg OOrraannggee’’ss ffiirreewwaallll aanndd IIPPSS eexxppeerrtt RRaayy SSttoonnee hhaass jjuussttccoommpplleetteedd ppuuttttiinngg SSoouurrcceeffiirree’’ss ppoowweerrffuull rraannggee ooff aawwaarrdd--wwiinnnniinngg sseeccuurriittyy aapppplliiaanncceess tthhrroouugghh iittss ppaacceess pprriioorr ttoo bbeeiinnggiinncclluuddeedd iinn tthhee ccoommppaannyy’’ss bbeesstt ooff bbrreeeedd pprroodduucctt ppoorrttffoolliioo..

“The Sourcefire Defense Center™ is a powerful, yet easy-to-use centralised management console that correlates threats against network and vulnerabilityintelligence. It provides a centralised command andcontrol of Sourcefire 3D® Sensors, including eventaggregation and 3D Sensorpolicy administration. With anextensive range of sensormodules, the appliance offers a reliable, high performancesecurity platform suitable forthe full range of enterprise-class network environments.”

Sourcefire 3D® Sensors are fault-tolerant, purpose-built appliancesavailable with throughputs from 5Mbps up to 10Gbps. 3D Sensors passively aggregate network and user intelligencewhile defending the network against internal and external threats.Each 3D Sensor is capable of running Sourcefire IPS™, RNA,RUA, and NetFlow Analysis modules.


In the few months since itsintroduction into Boxing Orange’ssecurity armoury, Tripwire hasproved highly popular amongst the

customer base with the first deployments now complete. The most recent Tripwire installation was part of a majorGovernment department upgrade. Tripwire specialist, Richard Ackroyd said:

“We have been extremely impressed with the Tripwireproduct and we are very happy to offer this within ourmanaged services.”

Tripwire is industry recognised for its enterprise-level configurationcontrol software. Its leading product, Tripwire Enterprise, is the firstto combine configuration assessment with configuration changeauditing in a single solution. Tripwire Enterprise helps IT ensure the organisation not onlyachieves and maintains configurations in an operationally optimised,compliant and secure state but also helps them prove it.

For further information, email [email protected]

Many of the companies we speak to tell us

that they are being squeezed from all sides

at the moment; increased regulatory

pressures mean that businesses need to do

more to protect data held on their systems;

new and more sophisticated cyber attacks

are testing the capabilities of network

security infrastructures to the limit and

financial pressures are restricting budgets

for investment in new technologies –

who would want to be a network security

manager in a recession?

The reality is that businesses cannot afford to

wait for the upturn and many are now seeing

the advantages of outsourcing the core

services needed to ensure that their network

security meets the requirements of their

businesses, as an answer to their problems.

Outsourcing security services to a company

like Boxing Orange brings immediate

benefits, particularly in terms of the day to

day management and maintenance of the

complex array of different technologies

companies need. Our team of highly qualified

and experienced security experts are on

hand 24/7 to handle issues as and when

they arise for a fraction of the cost of

maintaining an equivalent in-house resource.

Market analysts are forecasting that the global

market for cloud-based security services will

see double digit growth over the next 3 to 5

years reaching over £2billion by 2012. With

the addition of our enhanced SIEM solution to

our already established managed services

and professional consultancy capabilities, at

Boxing Orange we are ready to service this

demand and can offer the full range of

support to enable customers to stay secure

through the current recession and beyond.

Call 0113 232 2330 to speak to one of our security consultants for moreinformation on our range of services.

Staying secure despite the recession

Phil Ineson - Sales Director

11BBOOXXIINNGG OORRAANNGGEE / SECURITY MATTERS wwwwww..bbooxxiinnggoorraannggee..ccoomm

SSEECCUURRIITTYY MMAATTTTEERRSS

Boxing Orange Take to theSkies for Charity

The Boxing Orange team have beentesting their nerve to help raise muchneeded funds for the company’sadopted charity, Martin HouseChildren’s Hospice. Braving strongwinds and the urge to run in theopposite direction, 20 members ofthe Boxing Orange staff agreed tostrap themselves to another humanbeing they had only just met andthrow themselves out of a plane from15,000ft in the air…raising £3000 inthe process.

Martin House, based in Boston Spanear Wetherby, provides specialistcare for children and young peoplewith life-limiting illnesses and is BoxingOrange’s preferred local charity. Boxing Orange’s staff raise money on an ongoing basis and are alwayswilling to try new activities to helpboost funds.

www.martinhouse.org.uk

CCHHAARRIITTYY

0113 232 2330 [email protected]

Friday WebcastWhen: Last Friday of every month

What: 30 minute Webcast on atopical security issue

Up and Coming Webcasts

• PCI DSS 1.2 – Getting on the pathto compliance

• Security on Demand – SIEM as a Service

• Managing Third Party Riskand Compliance

For details of these and Boxing Orange’sregional seminar programme register forour regular email updates atwww.boxingorange.com/webinars

Documents

Security Matters