Thursday, February 11, 2010

6 tips on choosing the right security products, aryah.net

Finding the right security products to protect an organization’s IT investments is often a difficult, time-consuming task. With so many offerings on the market, how does an organization know which product best meets its needs? Which product actually delivers on its claims?\

For all types of security products you can visit Aryah.net


One way companies can accomplish this more easily – and save time and resources – is to rely on third parties to provide independent product assurance as part of the request-for-proposal process.

Carefully document product-selection requirements and then formally compare them with either published testing results or certification requirements from a third-party assurance program. Requiring potential products to be tested or externally certified significantly reduces time spent analyzing products.

Several entities – including independent testing and certification labs, government assurance programs, trade magazines, analyst firms and commercial labs – offer varying levels of product assurance. Independent testing and certification labs offer a cost-effective choice. Additionally, the best third-party test labs strive to be unbiased and vendor- and product-neutral.

Not all testing organizations are the same. Pay close attention to the organization’s public criteria (testing/certification criteria should be publicly available); relevance (how much overlap exists between the third party’s published criteria and the enterprise’s business requirements); and frequency (how often is testing done and at what intervals). Also, ensure that the testing organization relies on a scientific, repeatable testing methodology.

Choose a third-party organization that requires its certified products to pass all – not just some – of its tests and verifies that fixes are incorporated into the product. Product assurance testing should not be a static, once-and-done process. Rather, look for ongoing testing.

No comments:

Post a Comment