Services
Security Strategy
& Planning
We help businesses create Security Strategies & plans that resonate with their business objectives and goals.
-
Business awareness to understand the current state, risk profile & appetite.
-
Assist the organisations in defining a Security strategy including short-term and long-term plans.
-
Identify the culture, staff availability & capabilities for strategy execution.
-
Strategy development by defining governance model and frameworks.
-
Help create metrics & benchmarks.
-
If needed, assist in implementing and operations of the strategy.
Security Awareness
It is one of the most important and oft neglected areas of Security, the Security Awareness training. Why do it?
-
To prevent breaches
-
To influence company culture
-
To increase security robustness
-
For Compliance and host of other reasons.
How do we do it?
-
Customized training sessions based on employee type & technical expertise.
-
Creating information advisories.
ISMS & BCMS Implementation
Information Security Management Systems (ISMS) is a systematic and structured approach to managing information so that it remains secure. Business continuity management System (BCMS), is a management system designed to address the threat of disruptions to business activities or processes.
We use ISO 27001 & ISO 22301 standards as frameworks ISMS & BCMS implementation. We create or customize controls based on client needs.
The standards provide best practices and can be treated as baseline for security and continuity.
Vulnerability Assessment / Penetration Testing
Need to update
We also provides the following solutions & services based on customer needs.
-
Information Security Policies & procedures
-
Business Impact Analysis
-
Define & Refine - Information Security Metrics
-
Minimum Baseline Security Standards (MBSS)
-
Security Trainings
-
Vulnerability Assessment & Penetration Testing
-
IT / IS strategy architecture design & review
Virtual CISO / Fractional CISO
A Virtual CISO is an on demand CISO. A vCISO is essentially a security practitioner who provides their advice and insights to an organization on an outsourced and ongoing basis, usually part-time and remotely.
They are best suited to startups and growing companies and are an ideal approach for supporting the management team or leveraged as a short-term solution.
-
Provide leadership on risk, governance, Incident Response, Disaster Recovery & Business Continuity
-
Provide Expert assessment on security threats, risks compliance
-
Provide consultation to build effective cybersecurity & resiliency program
-
Facilitate the integration of security into your business strategy, process & culture
-
Manage the development, roll-out, and ongoing maintenance of cybersecurity programs
-
Assist with integration and interpretation of information security program controls
-
Serve as an Industry expert
-
Serve as security liaison to auditors, assessors, and examiners
Security Awareness & Other Services
We also provides the following solutions & services based on customer needs.
-
Customised Security Awareness Trainings & workshops
-
Security Awareness Program creation
-
Business Impact Analysis
-
Define & Refine - Information Security Metrics
-
Minimum Baseline Security Standards (MBSS)
-
Security Trainings