Cybersecurity

Additional Services

Where required, our experts will dig deeper, reviewing certain areas or components in greater detail including:

• Reviewing and assessing your overarching information security policy framework across the following subcategories:
  • Information security
  • Access management including:
    • Access controls managing physical and logistical access to your information systems and supporting infrastructure
    • Appropriateness of privileged level access to your information systems and supporting infrastructure
    • Management of third-party access
  • Information (data) management
  • Incident management
  • Network monitoring and detection – including vulnerability management
  • Physical Security
• Information system acquisition, development and maintenance – including third-party management
• Effectiveness of your third-party service agreements
• Review and assessment of your patching and IT change control processes
• Assessment of your IT Governance processes including:
  • Compliance and reporting
  • Regulatory environment requirements
  • Information security review planning
  • Accountability and management of cyber security and information risk
• Assessment of your human resources security framework, including your approach to education and awareness
• Effectiveness of your information risk management processes in identifying and mitigating potential information or cyber risks
• Effectiveness of the adequacy and currency of the business continuity and disaster recovery plans
• Performance of a vulnerability assessment of externally facing systems and platforms