Our risk assessment practice helps mitigate the potential loss due to error, fraud, inefficiency, failure to comply with statutory requirements and actions that may have a negative effect on an organization. If your organization has ever asked these questions, a risk assessment may be right for you:

Our risk assessment practice helps mitigate the potential loss due to error, fraud, inefficiency, failure to comply with statutory requirements and actions that may have a negative effect on an organization. If your organization has ever asked these questions, a risk assessment may be right for you:

External vulnerability assessment, manual validation and penetration testing of Internet facing networks, systems, sites and applications (aka the hacker’s perspective).

Managing IT risks and compliance are major concerns for many organizations, including those in public accounting, business and industry, consulting, and government/ not-for-profit. Organizations that do not understand, or have not considered, the risks associated with information technology are generally not prepared to mitigate such risks. As a result they are ill-prepared to face the pressures that accompany increased vulnerability within the IT environment.

Implementing security architecture is often a confusing process in enterprises. Traditionally, security architecture consists of some preventive, detective and corrective controls that are implemented to protect the enterprise infrastructure and applications. Some enterprises are doing a better job with security architecture by adding directive controls, including policies and procedures. Many information security professionals with a traditional mind-set view security architecture as nothing more than having security policies, controls, tools and monitoring.

The purpose of a comprehensive review is to take an in depth look at existing administrative policies to: 1) determine if a policy is still needed or if it should be combined with another administrative policy; 2) determine whether the purpose and goal of the policy is still being met; 3) determine if changes are required to improve the effectiveness or clarity of the policy and procedures; and 4) to ensure that appropriate education, monitoring and ongoing review of the policy is occurring.

IT risk assessments are the next step after performing a business impact analysis (BIA). Once you've performed a BIA on your organization and have analyzed critical business functions and identified the impact a loss of those functions could have on your organization, you can begin your IT risk assessment.

Our Network Architecture Assessments aim at reviewing the network infrastructure design and configuration for deficiencies that would expose the organization to risk. A Network Architecture Review engagement is focused on the architecture of the network, with an emphasis on identifying and analyzing the effectiveness of security controls present in the network.

The effectiveness of a Disaster Recovery Plan is diminished by changes in the environment that the plan was created to protect. These changes can take many forms. The following are some major factors that tend to reduce the plan’s effectiveness:

Best practices indicate the need for such reviews during the Software Development Life Cycle (SDLC) to ensure the timely delivery of a secure and compliant product. By incorporating code testing early in the SDLC, you greatly reduce the cost of resolving errors and remediating vulnerabilities during late-stage testing or post deployment.

Our risk assessment practice helps mitigate the potential loss due to error, fraud, inefficiency, failure to comply with statutory requirements and actions that may have a negative effect on an organization. If your organization has ever asked these questions, a risk assessment may be right for you:

IT system audits focus on security controls over physical and logical security of the server, including change control, administration of server accounts, system logging and monitoring, incident handling, system backup and disaster recovery.