15 years ago NonStop systems were quite isolated. The systems were accessed via serial lines and data transfer was done with magnetic tapes or via X25. This has changed drastically:

• For users, Telnet access via TCP/IP became the widely accepted standard.
• For file transfer the "Internet standard" FTP is available and frequently used.
• Numerous add-on products allow data transfer to other systems and the integration of NonStop systems into client-server applications and heterogeneous worlds. There are RSC, ODBC, Janus, Tuxedo, HTTP, and CORBA - just to name a few.

Although increased functionality proved to be beneficial, these changes are questionable in terms of security: sensitive, unencrypted data is spread all over the company network and can be read by anybody with little effort. These new risks are not covered by running Safeguard and looking at the Audit logs.

A Network Security Review of your NonStop system(s) will look at network connectivity and provide the following information:

• The visibility of the NonStop system(s) in the network is analyzed
• Which type of information traverses the network (and goes where) ?
• Assessment of risks
• Potential Countermeasures