Our independent audit of your information security highlights the organisational, technical and personnel shortcomings in your company and proposes meaningful measures for improvements. With our detailed plan of action, you receive the foundation for the long-term strengthening of your information security. You also receive recommendations for technical and organisational measures as well as suggestions for building awareness among employees and how to train them.
Our Cyber Security Audit and Compliance Assessment embrace the following areas:
- Security Audit based on ISO 27001/27002
- GAP analysis in terms of ISO 27001 certification
- Security Audit based on NIST Cybersecurity Framework
- Security Audit, penetration test and vulnerability scan based on PCI DSS
- GAP analysis in terms of PCI DSS certification
- Review of the system and architecture
- Penetration test based on OSSTMM
- Vulnerability Scans
- Social engineering audit
Our penetration tests provide a reliable assessment about the security status while considering all the factors, which could influence security: applications, systems, networks and users. In order to analyse these decisive factors in detail we offer a selection of tests. The result is an individual penetration test, which takes full account of the specific threats posed. Whether your infrastructure is protected against external or internal attacks will come to light in a penetration test conducted by our security experts.
Our Ethical Hacking and Penetration Test offer covers:
- Penetration Tests (internal and external)
- Malware Protection Test
- Anonymous web application test (e-banking, portal, e-shop etc.)
- Privileged web application test (e-Banking, Portal, e-Shop etc.)
- Mobile application test
- Remote access test (suppliers & employees - VPN access)
- Notebook Client Test (mobile users with and without admin rights)
- WLAN infrastructure test
- Social Engineering
- Cyber Attack Simulation / Red Teaming
Interested? Get in contact with us!
In conducting a social engineering audit we examine the security behaviour of your employees. Our social engineers attempt by personal contact to your employees steal confidential information by exploiting the trust, good faith and helpfulness or excessive demand and uncertainty of the employees. Depending on the test objective and target group, we use different methods and types of social engineering attack, ranging from direct contact, either by telephone or in person, to electronic channels, such as email, chat or social network platforms, up to postal contact with the target. Where required, we also add the selective handing over of manipulated USB storage media, the systematic data analysis over the Internet, or the evaluation of log files and system information to our attack repertoire.
In principle, we look at how your employees respond to the following aspects:
- Compliance with security-relevant business processes
- Handling sensitive company information
- Compliance with user guidelines
- Compliance with IT security guidelines
- Compliance with access regulations
Ready for SWIFT Compliance? This year, SWIFT is once again issuing more stringent regulations for financial service providers. New SWIFT controls have been added, and several have been upgraded from advisory to mandatory. A real problem for many companies is the one-year period in which the changes must be made. Where does that leave you?
InfoGuard is a SWIFT assessor and confirmed Cyber Security Provider. Our SWIFT assessment gives you a comprehensive overview of your current status and recommendations for measures that meet Compliance v2021. The SWIFT assessment includes the following:
Kickoff & Planning
- Interpretation of the applicable processes, instructions, systems etc.
- Identification of critical systems
- Defining of the organisation, roles and framework conditions of the project
- Definition of testing range (Scope)
- Creation of interview plan
Establishing the actual situation
- Triage and review of existing documents
- Interviews with relevant employees
Assessment & Reporting
- Identification of divergences from the CSCF and the assessment of these in terms of criticality
- Clarification of open questions
- Coordination of results
- Finalisation and delivery of reports
More information and the enquiry form can be found here:
