Special Vulnerability Announcement
Do you currently own a Cisco 506, 501 or 515E PIX? If so, your network may be vulnerable to security threats. Does your current configuration contain conduit statements? If you answered "yes" or if you are not sure, please contact the CPR Call Center at (616)575-8500 and a support technician will review the configuration for you.

Problem
PIX Security Appliance release 6.3 will be the last release to support the conduit and outbound commands. The next major PIX feature release will no longer support the conduit and outbound commands and all PIX systems using these commands must be completely migrated over to using ACL (Access Control List) commands prior to being upgraded.

If a PIX configured with conduit and outbound commands is upgraded to the next major feature release it will output errors regarding those commands and the functionality of the PIX will be severely impacted.

Solution
CPR strongly encourages all customers to update their PIX operating system to the latest IOS release level and have the configuration revised to address the above listed security issue.

Customers using the PIX 515E will also need to upgrade the memory in order to complete the migration to 7.0 code. Please contact CPR or click here if you would like assistance with your upgrade and migration.

Information Security & Forensics
Information technology pervades almost every aspect of business these days. If someone commits fraud or theft in your business, it likely involves computers in one way or another, and that “electronic evidence” is critical in the impending investigation and litigation.

Analyzing computer contents is part of many financial fraud investigations. Once an incident takes place, a business must find and preserve computer evidence in a form that is acceptable to law enforcement agencies and courts. The business must also retrieve hidden or deleted data, if it exists.


A computer forensics specialist can extract information and is likely to look at a number of factors, including:
• Did the suspect have access to more than one computer?
• What kind of rights did he or she have on the network?

Proper collection and analysis of electronic evidence is often critical in criminal investigations, civil litigation, and corporate internal investigations. Contact us if you believe a crime has occurred — or to learn how to prevent one from happening in the first place.

CPR is a founding member of the West MI Fraud Control Group(TM). Our partner, Echelbarger, Himebaugh, Tamm & Co. PC, has Certified Fraud Examiners and Certified Public Accountants with many years of forensic accounting and fraud detection experience on staff. Plus, they offer expertise in litigation support. Visit the "Services" portion of their website (www.ehtc.com) to find out how they can assist you with conducting fraud and systems audits, evaluating and strengthening internal controls, and presenting expert testimony.

For more information about CPR’s security services, contact the CPR Customer Support Center at 616-575-8500 ext. 0 or your Account Manger today.

Computer Forensics Specialist Joins CPR’s Security Team
Daniel Romej joined CPR as a Security Analyst, specializing in Computer Forensics, Information Security, System Administration and Accounting Software. Mr. Romej is an EnCase Certified Examiner (EnCE), a Microsoft Certified System Engineer (MCSE), a Compaq Accredited System Engineer (CASE), a Certified NetWare Engineer (CNE), and a Certified Public Accountant (CPA). Daniel has over 8 years of experience in the technology industry and has worked in all segments of the market place including litigation support and leasing.

News from the CPR Learning Center

CPR & The Employers Association Present:
Understanding and Managing the IT Function for the Non-IT Professional
June 12, 2006, 8:30am – 11:30am
Cost: $90.00 TEA Members / $125.00 Non-Members
For registration contact TEA (Wendy or Penny at 616.698.1167) or CPR (Karen Forester at 616.575.8500 ext.1331)

CPR in conjunction with The Employers Association is hosting a course “Understanding and Managing the IT Function for the Non-IT Professional.” Technology is often the thread that connects our businesses to our customers, to our employees and to our suppliers. But how much of technology’s capacity do we really understand? Come and get an overview of what technology is, does and can do. The presentation will include:
• The Good/Bad of IT
• Buying technology solutions: Evaluating technology products and services
• Avoiding the pitfalls
• Making better IT hiring, project and purchasing decisions
This course is designed for non-IT people who need to manage and procure IT services as well as CEOs, CFOs, Managers and HR professionals who hire, manage IT functions, and purchase IT solutions.

Business Continuity Seminar: Building a Plan
Wednesday, July 12, 2006 8:30am – 10:30pm

Business Continuity and Disaster Recovery are real concerns for most businesses. The process of assuring auditors, business owners and shareholders that you are taking the appropriate steps to plan and prepare for a business interruption can be difficult and costly.

What procedures have you implemented? What plans do you have in place?
This information session will highlight the baseline information needed to develop an effective business continuity plan. The approach presented will assist attendees in prioritizing tasks based on several critical factors, including regulatory requirements, cost, and operational effort.