If you are proactive about your health you would normally get a health check done regularly. Similarly, it is recommend that ever company get an overall security assessment done every 6-12 months as systems and policies change constantly.

Security is complicated, so we have broken it down into the following pieces of the puzzle.

Risk grows exponentially with time. Now is the right time to take action.

The best way to assess your security is to put it to the test.

No car manufacturer will sell a vehicle without a crash test. A penetration test is the logical next step. It will show how effective your strategy is against attackers. Without it, you are just guessing and hoping for the best.

Penetration Testing (pentesting or Ethical Hacking) is the act of gaining access to a network, much like a hacker, by exploiting security vulnerabilities. The attack can be performed from internal or external means. The goal is to gain sensitive information, like in a data breach, and determine effectiveness of security investments against a controlled and simulated attack.

We offer:

• Web Application penetration testing
• Wireless penetration testing
• Internal Pentesting
• External Pentesting
• Telephony or VoIP penetration testing
• Social Engineering testing
  • Spear Phishing Campaigns
  • Vishing (voice/phone)
• Physical penetration testing
• Validation of 3rd party assessment results

The results re-assess your security plans and develop strategies to mitigate such attacks.

A Vulnerability Assessment takes a broader approach and identifies risks and vulnerabilities and how to mitigate them. Primary tasks include:

• Device Discovery
• Scanning for known vulnerabilities in systems, services, protocols, OSs
• Open Source Intelligence (OSINT) gathering
• Catalog resources & categorize the threats and risk
• Identify False Positives
• Identifying security holes and vulnerabilities
• Analyse information security posture
• Security Assessment Report
  • Identify sensitive data that may be at risk of being compromised
  • Investigate potential business impact
  • Evaluation of Risk
  • Investigate and develop remediation strategies
  • Prioritization of vulnerabilities
  • Explanation of weaknesses
  • Security Roadmap

The results highlight the gaps and weaknesses and develop a remediation plan on how to mitigate those threats or bring them to an acceptable level of risk.

a. Security Frameworks

There are a number of major industry standard security frameworks: CIS 20, NIST CSF and ISO27001

To develop a strong foundation and roadmap for a secure infrastructure, we help organizations identify these security controls, and assist in planning and implementing security best practices.

The quickest way to get started is by adopting the CIS Controls (Cyber Security Frameworks by the Center of Internet Security; Critical Security Controls for Effective Cyber Defense.

Click here for the 20 CIS Controls.