Our independent audit of your information security highlights the organisational, technical and personnel shortcomings in your company and proposes meaningful measures for improvements. With our detailed plan of action, you receive the foundation for the long-term strengthening of your information security. You also receive recommendations for technical and organisational measures as well as suggestions for building awareness among employees and how to train them.
Our Cyber Security Audit and Compliance Assessment embrace the following areas:
- Security Audit based on ISO 27001/27002
- GAP analysis in terms of ISO 27001 certification
- Review of the system and architecture
- Penetration test based on OSSTMM
- Vulnerability Scan
Our penetration tests provide a reliable assessment about the security status while considering all the factors, which could influence security: applications, systems, networks and users. In order to analyse these decisive factors in detail we offer a selection of tests. The result is an individual penetration test, which takes full account of the specific threats posed. Whether your infrastructure is protected against external or internal attacks will come to light in a penetration test conducted by our security experts.
Our Ethical Hacking and Penetration Test offer covers:
- Architecture Review
- Information Gathering
- Check of applications and IT systems
- Check of Clients, e.g. PC, Notebook, Tablet and mobile phone
- Wireless and wired network check
- E-Mail- and Internet-Malware test
- Internal and external Penetration Tests
- Breach Detection & APT Hunting
- Cyber Threat Assessment
- Cyber Attack Simulation
Interested? Get in contact with us!
In conducting a social engineering audit we examine the security behaviour of your employees. Our social engineers attempt by personal contact to your employees steal confidential information by exploiting the trust, good faith and helpfulness or excessive demand and uncertainty of the employees. Depending on the test objective and target group, we use different methods and types of social engineering attack, ranging from direct contact, either by telephone or in person, to electronic channels, such as email, chat or social network platforms, up to postal contact with the target. Where required, we also add the selective handing over of manipulated USB storage media, the systematic data analysis over the Internet, or the evaluation of log files and system information to our attack repertoire.
In principle, we look at how your employees respond to the following aspects:
- Compliance with security-relevant business processes
- Handling sensitive company information
- Compliance with user guidelines
- Compliance with IT security guidelines
- Compliance with access regulations
Ready for SWIFT Compliance v2020? This year, SWIFT is once again issuing more stringent regulations for financial service providers. New SWIFT controls have been added, and several have been upgraded from advisory to mandatory. A real problem for many companies is the one-year period in which the changes must be made. Where does that leave you?
Our SWIFT assessment gives you a comprehensive overview of your current status and recommendations for measures that meet Compliance v2020. The SWIFT assessment includes the following:
Kickoff & Planning
- Interpretation of the applicable processes, instructions, systems etc.
- Identification of critical systems
- Defining of the organisation, roles and framework conditions of the project
- Definition of testing range (Scope)
- Creation of interview plan
Establishing the actual situation
- Triage and review of existing documents
- Interviews with relevant employees
Assessment & Reporting
- Identification of divergences from the CSCF and the assessment of these in terms of criticality
- Clarification of open questions
- Coordination of results
- Finalisation and delivery of reports
More information and the enquiry form can be found here:
