Our Risk Assessment methodology exceeds regulatory standards for compliance. We measure risk levels to determine what types of controls are needed to combat threats, provide a framework to prioritize remediation, and compile the results into a detailed document for compliance reporting. Our risk assessment will help determine what type of controls are required to protect assets and resources (physical locations, networks/servers, staff, etc.) from threats – allowing your organization to reduce exposure and maintain an acceptable “risk tolerance”. See a sample report

An incident response plan is a set of instructions to help Companies detect, respond to, and recover from data breaches and network security incidents. These types of plans should address issues like cybercrime, data loss, social media and reputational breaches, and service outages that threaten daily work and the overall reputation of the Company.  Without a proper incident response plan in place the staff will lack the knowledge and procedures necessary to quickly respond to any threat to the organization.

​

An incident response plan should be set up to address a suspected data breach in a series of phases. Within each phase, there are specific areas of need that should be considered.

​

The incident response phases are:

​

1. Preparation

2. Identification

3. Containment

4. Eradication

5. Recovery

6. Lessons Learned

Auditing your existing security controls will allow you to determine whether you staff are adhering to the items identified as being a risk in the previously outlined risk assessment. We identify critical deficiencies and control weaknesses, verify that the controls meet the appropriate standards, and document each step of the process to provide a clear audit trail for reporting.

We provide a thorough evaluation of your networks to identify vulnerabilities and determine the adequacy of existing security controls. The assessment include any or all of the below listed assessment techniques

​

• Internal and external port scan

• Internal and external network vulnerability scan

• Asset classification assistance

• Policy reviews

• Policy awareness reviews

• In-depth regulatory and/or best practice review

• Network topology review

• Internal network vulnerability review

• Security countermeasure review (antivirus, firewall, access control, etc.)

Internal and external penetration testing services are conducted to evaluate the effectiveness of existing security measures. A probe of the network perimeter can be conducted to identify vulnerabilities and then mimic the actions of actual attackers – exploiting any weaknesses to gain greater access to your network.

Using real-world hacker tactics (like phishing, pretext calling, dumpster diving, or posing as a “trusted authority”), our experts can evaluate the human factor, identify security issues that need improvement and document compliance shortfalls. This service can be performed offsite using phone and email tactics, or onsite using disguises and impersonation tactics.

We can determine whether your web applications are targets for hackers due to application-layer vulnerabilities that can escape detection with traditional vulnerability scanning. Our web application testing will determine any weaknesses within your online application security profile that may expose sensitive information and will ensures access is not improperly granted due to such vulnerabilities.

Your wireless networks require close monitoring and periodic assessments to mitigate exposure to security threats. We can offer an onsite wireless security assessment and penetration test that gives your organization a detailed look into the current risk of your wireless network.