Security Assessment for Remote Workforce data sheet

Page 2
Data sheet
SERVICE BENEFITS
The HPE Security Assessment for Remote Workforce service equips organizations with insights, which is designed to help you:
• Understand the gaps in assessed security controls and processes and the associated security and risk exposure along with
HPE recommendations. This is based upon HPE’s findings intended to help address the identified security concerns
• Identify potential ways to reduce ongoing technology operation and adoption risk by leveraging HPE expertise and proven security
reference architectures
• Prepare your organization for security incidents resulting from remote work, and help identify potential ways to lower their likelihood and
impact
• Continue to be supportive of organizational policies and requirements
• Identify what security controls may need to be implemented to help protect the organization, while extending the virtual IT ecosystem to
include unknown networks, devices, and software
TAB LE 1 . Service features
Assessment of security
essentials to drive alignment
to security best practices
Assessment of remote access
environment
Reporting and presentation
HPE works toward performing the tasks identified in this table for up to five business days (not to exceed 40 hours):
Working with the Customer, HPE assesses certain Customer IT remote workforce security practices against the CIS Top 20 Critical Controls—
Implementation Group 1. These CIS Top 20 Critical Controls are scored on the P5 model
Up to 25 supplemental interview questions may be used to help assess the existing remote access environment. Additional information
may be sourced by HPE as appropriate
Reporting on output of HPE’s findings in PowerPoint format of up to 10 slides, along with one Customer debrief session to be delivered
via teleconference
SERVICE LIMITATIONS
• HPE and Customer shall agree upon the project schedule, which shall be based upon the allotted hours as set forth in Table 1, inclusive of
12 hours required by HPE for report generation and presentation
• HPE may conduct up to six interviews per the agreed project schedule
• HPE delivers the service remotely, with interviews conducted electronically using a mutually agreed facility (phone, audio/video
conference)
• HPE may review up to three Customer documents as part of the assessment
• No scanning tools are used in the performance of this service
• HPE does not require remote access to Customer network