• Evaluate the organizations information security policies and ensure that they meet industry requirements & do not violate any applicable laws & regulations

• Identify critical information systems infrastructure required for the organizations business processes and evaluate their security

• Conduct vulnerability assessments & penetration tests to highlight system vulnerabilities thereby identifying weaknesses in systems, networks and applications

• Evaluate controls applied to various security domains by:

    o Finding mis-configurations and rectifying them

    o Identify known and unknown risks related to technologies and address them

    o Identify known and unknown risks within your people or business processes  and address them

    o Strengthening existing processes and technologies

    • Educate people on performing security assessments

    • Educate people on securing systems, networks and applications

    • Provide information on:

    o The review of logging, monitoring & auditing processes

    o The building and review of Disaster Recovery Plan

    o The review of outsourcing security concerns

    • Compliance to Legal & Regulatory Standards

    • Create Security Awareness

    • Effective Management of Security Assessment Projects

    • Guarding against social engineering exploitation

    • Physical security control review

Click HERE to download a copy of the Framework