COMPANY PROFILE YEAR 2012

(1)

BRESCIA Via Creta, 78 25124 Brescia Phone +39 030 8373600 Fax +39 030 8373630 MILANO Via P. Borsieri, 22 20159 Milano Phone +39 02 6685549 Fax +39 02 700596750 ROMA Via G. A. Resti, 63 00143 Roma Phone +39 06 51963439 Fax +39 02 700596750 MADRID IBC COLBRAND C/Isabel Colbrand 6, 5plta 28050 Madrid Phone +34 91 3446910 Fax +34 91 3446911

INNOVERY B2B–INNOVERY PRODUCTS –INNOVERY ESPAÑA

C

OMPANY

P

ROFILE

–

Y

EAR

2012

1. BUSINESS ... 2 2. MANAGEMENT ... 2 3. COMPETENCES ... 2 3.1 SECURITY MANAGEMENT ... 2 3.2 LOGICAL SECURITY ... 3 3.3 CRYPTOGRAPHY ... 3 3.4 NETWORK SECURITY ... 3 3.5 PHYSICAL SECURITY ... 3

3.6 ENTERPRISE APPLICATION INTEGRATION –EAI ... 3

4. SERVICES ... 3

4.1 CONSULTING SERVICES ... 3

4.2 SYSTEM INTEGRATION AND DELIVERY SERVICES ... 3

4.3 PROJECT MANAGEMENT ... 3

4.4 TRAINING ... 4

4.5 OPERATIONAL SERVICES ... 4

5. PRODUCTS ... 4

5.1 INNOVERY ENTERPRISE ELECTRONIC SIGNATURE SUITE ... 4

5.2 SECURITY CLIENT TOOLKIT ... 4

5.3 CARD MANAGEMENT SYSTEM ... 4

5.4 REGISTRATION AUTHORITY ... 4

5.5 CALOG-BOOK ... 4

5.6 UTILITIES FOR CERTIFICATION AUTHORITY ... 5

5.7 CERTIFIED AND REGISTERED ELECTRONIC MAIL (PEC,REM) ... 5

5.8 SECURE UTILITIES FOR SAP ... 5

5.9 TIME STAMPING ... 5

5.10 STERLING COMMERCE ADAPTERS ... 5

5.11 OCSP ... 5 6. REFERENCES ... 5 6.1 CUSTOMERS ... 5 6.2 SERVICES ... 5 7. PARTNERS ... 7 8. BOARD ... 7

(2)

1. B

USINESS

INNOVERY is a leading ICT Services Provider and Software

Developer for medium to large sized customers, with a significant experiences in the fields of:

ICTSECURITY

ENTERPRISE APPLICATION INTEGRATION –EAI

INNOVERY is a privately-owned Joint Stock Company founded in

2001 by high qualified ICT security consultants.

INNOVERY develops its business cooperating with its affiliates:

 INNOVERY PRODUCTS, based in Italy;

 INNOVERY B2B,based in Italy;

 INNOVERY ESPAÑA, based in Spain.

All Company services are ISO 9001:2008 and ISO 27001

certified.

INNOVERY has consistently increased its revenue over the years:

The Company has a strong and diversified customer base building up a particularly strong reputation for quality and innovation:

2. M

ANAGEMENT

Our Management Policy is based on the following values:

 Operating with working groups that combine strategic

skills with technical and highly qualified skills;

 Offering and developing solutions consistent with business

model of customers;

 Quickly and effectively run.

INNOVERY has expanded by recruiting and retaining highly

educated and specialized engineers, that are building a unique experience through the implementation of technologically advanced IT services:

3. C

OMPETENCE

INNOVERY designs, develops, supports and promotes software ICT applications and solutions by using and integrating the state-of-the-art technologies: ICTSECURITY  Security Management  Logical Security  Cryptography  Network Security  Physical Security

ENTERPRISE APPLICATION INTEGRATION –EAI

Breakdown by technology of the Company revenue is as follows:

3.1 S

ECURITY

M

ANAGEMENT

Our security consultants provide a comprehensive service to take full control over your security infrastructure. Our Security Management activities include:

 Risk Analysis

 Vulnerability Assessment

 Penetration Test

 Soft Security Assurance

 Security Policy Development

 Audits

 SCADA Security

(3)

3.2 L

OGICAL

S

ECURITY

Our Logical Security activities ensure that access to information and business processes should be controlled on the basis of your business and security requirements.

INNOVERY Logical Security activities are in fields like:

 Identity Access Management

 SIEM  Biometric Signature  Access Control  Log Management  Compliance Management

3.3 C

RYPTOGRAPHY

INNOVERY provides security consultancy to organizations in implementing or expanding the business use of cryptography, by maximizing returns on investment in public-key infrastructure (PKI) and related digital security technologies.

Our cryptography services include:

 Electronic signature, Encryption, Authentication, Electronic

Transactions, Internet technologies,

 Applications for Public Key Infrastructure,

 Implementation of dedicated PKIs,

 Secure workflow of electronic documents,

 Internet security

 Architecture, Engineering and Integration

 Certificate Policy (CP) and Certification Practices

Statement (CPS)

 PKI Standards and Interoperability

 Key Recovery products and solutions

 PKI Certification and Accreditation

 Utility that allows individuals to electronically sign and

store virtually any format of document

 Solutions to electronic signature and cryptography

Our main solutions in which the Digital Signature and the Cryptography are a basic enabling issue:

 Active & Passive e-Invoicing Life Cycle e-Commerce

 Certified and Registered Electronic Mail

 Collaborative Processes  Authorization Cycles

 Legal Digital Archiving  Data Confidentiality

 Secure Archive  Privacy Management

 Engagement Processes

3.4 N

ETWORK

S

ECURITY

INNOVERY specialists are network security experts in the

following latest technological fields:

 Intrusion Detection Systems (IDS)

 Intrusion Prevention Systems (IPS)

 Virtualized environment security

 Cloud Security  Firewalling

3.5 P

HYSICAL

S

ECURITY

By providing a new perspective about the importance of integrating physical and logical security under a single body, our Physical Security activities are in fields like:

 Intrusion Detection

 Access Control

 TVCC

 Fire Fighting

3.6 E

NTERPRISE

A

PPLICATION

I

NTEGRATION

–

EAI

INNOVERY can help customers to integrate both internal and

external business processes across the value chain, and do it in smart, profitable increments.

 B2B

 Business Process

Integration

 Multi-Enterprise SOA

 Engagement Processes

 Managed File Transfer

 EDI Solutions  Authorization Cycles  Data Confidentiality  Privacy Management  XML  Web Services

4. S

ERVICES

4.1 C

ONSULTING

S

ERVICES

INNOVERY Consulting Services are in fields like:

 Security Strategy & Compliance

 Security Governance

 Security Awareness

4.2 S

YSTEM

I

NTEGRATION AND

D

ELIVERY

S

ERVICES

INNOVERY system integration and delivery services, from

consulting and planning to implementation and deployment activities, have been designed to meet a variety of needs, and provide customers with the most effective support options for their organizations that address their specific requirements.

4.3 P

ROJECT

M

ANAGEMENT

Our project delivery methodology, built on PMI’s PMBoK, positions us at CMMI Level 3, provides all project team members and stakeholders with a clear step by step guide to follow all through the lifetime of the projects.

Our Project Management methodology involves the following main knowledge issues:

(4)

 Project Management of

entire Project Life Cycle

 Change Management  Quality Management  Technical Coordination  Management of Project Resources  Financial Management  Risk Management  Configuration Management

4.4 T

RAINING

INNOVERY training service can address customers specific

educational requirements, understand their needs and build training materials and hands-on labs.

4.5 O

PERATIONAL

S

ERVICES

INNOVERY Operational Services are all task-related activities

relevant to Customer day-to-day support of individual components, group of components or a complete ICT Infrastructure.

To speed resolution of issues and to keep costs down for our Customers, we employ a combination of the following

monitoring and management services:

 remote services, by a dedicated Control Room, and

 on-site services

Monitoring shall include:

 Alerts

 Performance

 Configuration

 Vulnerabilities

Management shall include:

 Reactive - Service Desk

- Incident Management

- Problem Management

 Proactive - Policy Management

- Patch Management

 General - System Audit

- Asset Management

- Configuration Management

- Software Deployment

- Software Updating

These services are available on the web or by telephone by skilled engineers that offer superior ICT knowledge and expertise to enhance customer skills and service-level management.

5. P

RODUCTS

INNOVERY develops its own ICT products and integrated turnkey solutions with and excellent cost/quality ratio based on the latest, state-of-the-art technologies.

5.1 I

NNOVERY

E

NTERPRISE

E

LECTRONIC

S

IGNATURE

S

UITE

Based on SOA architecture that allows maximum flexibility for additional new features, this suite is made up of some client components and some server components, which provide the centralized services.

Main features are to sign and verify, encrypt and decrypt all documents. It supports keys and certificates stored on hardware (PKCS#11) or software (PKCS#12), according with DigitPA rules. It also allows time stamping and, thanks to the wrapper layer, it also allows the use of any kind of Smart Card.

Optional features of the suite are:

 Remote Signature  Digital Signature Optimized  XML signature  Registration and Issuance of Certificates  Key management

 File secure deleting

PDF signature

 Legal Remote Signature

 Basket and Automatic

Signature

 File set signature

 PIN management

 SSF management for SAP

 OCSP management

5.2 S

ECURITY

C

LIENT

T

OOLKIT

Software library that collaborate when used in the construction of INNOVERY SECURITY CLIENT new cryptography features.

5.3 C

ARD

M

ANAGEMENT

S

YSTEM

Application that provides a complete and flexible solution to manage the issuance and administration required for smart card deployments.

Cooperating with INNOVERY Registration Authority, it manages

the cards as well as data, applets and digital credentials including PKI certificates related to the cards throughout their entire life cycle.

5.4 R

EGISTRATION

A

UTHORITY

A complete Web Based Application Suite that allows issuing of digital certificate and that offers of some advanced features:

 Integration module for smart card thermo-graphical

printers;

 Pre-Registration Module that allows user data uploading.

5.5 CA

L

OG

-B

OOK

A complete Application Platform for logging and monitoring CA’s applications critical events like: Certification Authority, Time

(5)

Stamping Authority, Card Management System, Registration Authority, Viewers et-cetera.

5.6 SOC

D

ECISION

M

ANAGER

–

SOC-DM

Based on Oracle rule and knowledge systems and dynamic analytic models, SOC-DM entails all aspects of managing decision-making process within a SOC environment by better handling the tradeoffs between precision, consistency, agility, speed, and cost of decision-making.

5.7 U

TILITIES FOR

C

ERTIFICATION

A

UTHORITY

Application Platform for assembling Certification Authority components like:

 ASH-CMP service control

 Entrust interface library

 Cybertrust interface library

 Module for CRL publishing on Web server

5.8 C

ERTIFIED AND

R

EGISTERED

E

LECTRONIC

M

AIL

–

PEC

/

REM

Application Platform that allows sending and receiving e-documents with a high security level and giving legal value to delivery process, according with the legal requirements. REM can verify that an electronic message was sent to the intended recipient and to provide the originator of the electronic message with an independent confirmation that verifies the time and date that the electronic message was sent and the time and date that it was delivered.

5.9 S

ECURE

U

TILITIES FOR

SAP

Application that allows secure store and forward mechanisms to protect data in the SAP infrastructures

5.10 T

IME

S

TAMPING

Application that allows time stamp digital signature:

 Server component verified according with EAL3 Common

Criteria

 Complete time stamp management module

 Plug-in to interface HSM modules

 Plug-in to interface Postecom security modules

5.11 IBM-S

TERLING

C

OMMERCE

A

DAPTERS List of Adapters available:

 Time Stamp Adapter

 Storage Adapter

 EDI Signature Adapter

 Security Adapter

 Documentum Adapter

5.12 OCSP

Distributed OCSP system that validates pre-computes signed OCSP responses for every certificate and distributes these responses to unprotected Responders.

6. R

EFERENCES

6.1 C

USTOMERS

Below, our main Customers by market segment:

UTILITY – Terna, Enel, Postel, Iberdrola, Autostrade, Strada dei Parchi.

TELECOMMUNICATION – Telecom, TIM, H3G.

PUBLIC ADMINISTRATION – Comune di Roma, Regione Sardegna, Regione Siciliana, DigitPA, INPS, Notartel, SOGEI, CONSIP, SIAE, Università di Napoli, Università Cattolica, Repubblica di San Marino, Ospedale Mario Negri, ICE.

FINANCE – Banca d’Italia, RCI Banque, SIA SSB, Banco Popolare, Mediolanum, Unipol, UBI Banca, AVIVA, BBVA, Citi Bank, Cedacri, Banco Santander, IW Bank, Unicredit.

INDUSTRY – Otomelara, Ansaldo STS, Ansaldo Breda, Alenia, MDBA, Armani, Pirelli, Renault Italia, Ferrero, Unilever, SAIWA, Elettronica, e-Security, SELEX, Toshiba, Finmeccanica. RETAIL / DISTRIBUTION – Luxottica, Diesel, Sofidel, COOP Adriatica.

6.2 S

ERVICES

Below, the focus to some of the most important services provided to our main customers.

6.2.1

P

UBLIC

K

EY

I

NFRASTRUCTURE AND

D

IGITAL

C

ERTIFICATES

SYSTEM INTEGRATION – Implementation of standards-based interoperable Public-Key Infrastructure (PKI) committed to secure transactions in e-business applications: Legal PKI (Compliance with DigitPA Rules), PKI Enterprise, Technology Migration.

TECHNOLOGIES – Entrust, Critical Path, Microsoft, Verizon, Open

Source (Open CA), INNOVERY.

CUSTOMERS – Enel, Terna, SOGEI eccetera.

6.2.2

S

ECURITY

O

PERATIONS

C

ENTER

–

SOC

SYSTEM INTEGRATION – Technology and Business Project Analysis, Service Model Definition, Architecture Design,

Infrastructure Implementation Planning, Support to Activity

(6)

TECHNOLOGIES – Cisco, Symantec, CheckPoint, ISS, HP

ArcSight.

CUSTOMERS – Enel, Terna, SOGEI eccetera.

6.2.3

C

ERTIFIED AND

R

EGISTERED

E

LECTRONIC

M

AIL

–

REM

SYSTEM INTEGRATION – Implementation of an infrastructure to send and receive e-documents with a high security level and giving legal value to delivery process, according with the legal requirements.

TECHNOLOGIES – INNOVERY, Critical Path. CUSTOMERS – Regione Siciliana.

6.2.4

SIEM

&

P

RIVACY

C

OMPLIANCE

SYSTEM INTEGRATION – Security infrastructure to collect, manage, and send real time alert about activities on network device (firewall, IPS ,VPN), critical applications and so on, and integration with identity and access management infrastructure. Activities should include assessment, thorough evaluation of the user’s assets, system deployment and training.

TECHNOLOGIES – HP ArcSight. CUSTOMERS – Utility.

6.2.5

L

OG

M

ANAGEMENT

SYSTEM INTEGRATION – Implementation of system to collect and centralize log and other security events, check and track their integrity. Create archives for digital forensics analysis, create dashboards and reports; allow alert generation.

TECHNOLOGIES – HP ArcSight. CUSTOMERS – Finance and PA.

6.2.6

IDM

AND

W

EB

SSO

FEASIBILITY STUDY – Modernization and normalization of enterprise out-of-date proprietary authentication and authorization systems:

 Simplify and secure identity management systems of

holders and applications;

 Standardize and extend the authentication to applications;

 Replace with COTS components the current custom ones;

 Normalize the profiles management system;

 Extend the authentication and authorization, to the

systems Application-to-Application (Web Services);

 Increase the level of security and authentication

mechanisms;

TECHNOLOGIES – Oracle, Sun Microsystems: Sun Idenity

Manager, Sun Syncornization and Provisioning Module, Sun

Role Manager, Sun OpenSSO Enterprise , Sun Directory Server Enterprise Edition, Sun Open Directory Server.

CUSTOMERS – Utility.

6.2.7

E-I

NVOICING

SOFTWARE DEVELOPMENT AND SYSTEM INTEGRATION –

Implementation of ICT Infrastructure according with Italian and European legal requirements and Business Process (BP) based: Buyer e Supplier BPs, Standard e custom archive BPs, Trust weaver invoicing web services BP, Revalidation BP, End to end template BP, Post processing template BP.

TECHNOLOGIES – Sterling Commerce (Gentran Integration

Suite), Digital Signatures, C++, Java, Sun Microsystems

(J-Caps), INNOVERY.

6.2.8

EDI

SYSTEM INTEGRATION – To exchange, without human

intervention, purchase orders and invoices from one business system to the other.

TECHNOLOGIES – Sterling Commerce, Tibco, Digital Signatures,

C++, Java, INNOVERY.

CUSTOMERS – Finance.

6.2.9

M

ANAGED AND

S

ECURE

F

ILE

T

RANSFER

SYSTEM INTEGRATION – Provide a single application that handles all corporate file transfers regardless of protocol.

TECHNOLOGIES – Sterling Commerce, INNOVERY. CUSTOMERS – Utility.

6.2.10

XML/PDF

S

IGNATURE

SOFTWARE DEVELOPMENT – Application that allows digital signature of XML and Adobe documents According with Italian and European standards and Adobe specifications.

Technologies: INNOVERY, C++, C#.

6.2.11

C

ARTA

N

AZIONALE DEI

S

ERVIZI

(CNS)

SOFTWARE DEVELOPMENT – Enrolment of file encryption and SSL Certificates through Entrust CA

TECHNOLOGIES – INNOVERY, C++, Pkcs#11, CSP.

CUSTOMERS – Regione Siciliana.

6.2.12

N

ET

–L

INK

S

MART

C

ARD

SOFTWARE DEVELOPMENT – To allow enrolment and

management of health card in combination with other card security features

(7)

TECHNOLOGIES – INNOVERY.

CUSTOMERS – Regione Siciliana.

7. P

ARTNERS

Partnerships are basic to how INNOVERY conducts his business.

INNOVERY helps partners to respond to the needs of new

customers, strengthen relationships with existing customers, and open the potential for greater sales and profits.

INNOVERY has established long term cooperation and business relations with a great number of hardware and technology vendors. INNOVERY PARTNER R ES ELLE R S YS TE M I NTE G R ATI O N O PE RATI O NAL S UP PO RT TECHNOLOGY CA 

Identity Access Management, Identity Management, SSO.

ORACLE   

IBM   

CYBER-ARK   Privileged Identity Management: Manage and Update privileged user and administration accounts.

ENTRUST   

PKI, Digital Signature and Cryptography; Biometric Authentication.

XYZMO   

RSA  Strong Authentication.

TIBCO  Cloud Computing and Grid

Computing.

ALLENVAULT   

Log Management, SIEM, High Sensitive Data Management HP-ARCSIGHT   

IBM   

CISCO 

Integrated Network Security

TREND MICRO    MCAFEE   STONESOFT    SYMANTEC  TREND MICRO    SAFENET    Encryption HSM. THALES   

GEMALTO    Strong Authentication,

Cryptography IBM–STERLING

COMMERCE   

B2B Solutions, Enterprise Integration Application, Managed File Transfer.

HP-FORTIFY  Software Security Assurance _{(including Related Services)}

8. B

OARD

Gianvittorio Abate is INNOVERY Chief Financial and Operating

Officer (CFOO). Class ’73, he’s graduated in Informatics and specialized in the ICT Security and EAI fields.

He brilliantly runs the company, working in contact with his workers to successfully pursue the Customers targets.

His direct participation to numerous projecting and training activities and the achievement of key professional certifications establish significant issues in the affirmation of the Company with many Customers.

The most important activities conducted and managed by Gianvittorio Abate, which deserve to be pointed out, are:

 ICT Security/EAI Infrastructure projecting for companies of

the utility, financing and public administration sectors;

 Solutions projecting such as: electronic invoicing,

documents dematerialization, substitutive conservation (DigitPA) for companies in the utility, financing and public administration sectors;