Cyber Security Assurance & Advisory

We assess our clients’ effectiveness of security controls, resilience of systems against cyber threats, and the integrity of data. ​ Our technical assurance assessments include:​

• • Penetration testing
  • Vulnerability scanning ​
  • Security audits
  • Configuration reviews
  • Cloud security assessments​

We evaluate if our clients’ controls align with the applicable regulatory frameworks (e.g. NIST CSF 2.0, ISO 27001, SOC2, PCI DSS, Essential Eight, GDPR). ​We evaluate policies, procedures, technical implementation and documentation, assisting to identify gaps and remediate. ​We help identify improvements, enhancing the overall security maturity of our clients over time.​

We review the day-to-day management and execution of cyber security activities for you. We assess the effectiveness of processes, procedures, and controls in detecting, responding to, and recovering from cyber incidents. ​This includes reviewing the incident response exercises, security awareness training, and monitoring security metrics and key performance indicators (KPIs).​

​

We assess the cyber security practices of your vendors, suppliers, and business partners to ensure they meet the security requirements and standards (e.g. SOC2, ISO 27001, GDPR etc.). ​We evaluate third-party security policies, conduct security assessments, and establish contractual agreements to manage cyber risks associated with third-party relationships.​

We review our clients’ processes to ensure that cyber security risks are adequately identified, assessed, and managed at the executive and board levels. ​We review cyber security policies, risk management frameworks, and governance structures to ensure alignment with business objectives and regulatory requirements.

We evaluate our clients’ ability to withstand and recover from cyber-attacks and other security incidents. ​We test disaster recovery plans, business continuity procedures, and incident response capabilities to ensure your organisation can maintain essential functions and services during and after a cyber event.​