Information Security Services, namely day-to-day operations including accounts management, access management, configuration and change management, systems and network management and monitoring, help desk, incidence response and computer forensics; information assurance tools management, namely management of computer security software; implementation and management of firewalls and intrusion detection systems for computer networks; information security risk assessment, namely security risk and threat management in the field of vulnerability to breaches and hacking of computer and electronic information infrastructure; information security penetration testing; security policy development for computer systems; electronic commerce security services, namely PKI management, secure website operations and encryption services; virtual private network management, namely setup and troubleshooting of VPN sessions; implementation and management of public key infrastructure; information security product evaluation, namely analysis and evaluation of the goods and services of others in the fields of computers and security assessment and improvement