BigCity Networks IT Security Assessment Listing updated: October 20, 2005

BigCity Networks will conduct a review of your overall IT security program and work with you to prioritize identified action programs and adjustments in investment. The objectives are: Ensure prudent spending that mitigates risks with greatest potential business impact; Determine where regulatory requirements are being met and where you may be in violation; Build a foundation for your business case for decrease or increase in spending; Analyze current ability to protect intellectual property as well as physical assets; Understand if current practices and procedures reflect your overall strategy and business needs.

The approach taken will be: Gather information on current program and document findings; Evaluate current state in six key areas:
policy and standards, architecture and processes, awareness and training, technologies and products, auditing, monitoring and investigating, and validation; Present results in an executive-level presentation and determine appropriate go-forward activity.