Cyber Security Posture Review

Risk Management Regime – defining and communicating your information risk management regime is central to your organisation’s overall cyber security strategy.

Secure Configuration – having an approach to identify baseline technology builds and processes for ensuring configuration management can greatly improve the security of systems.

Home and Mobile Working – mobile working and remote system access offers great business benefits but exposes new risks that need to be managed

Incident Management – all organisations will experience security incidents at some point.

Malware Prevention – malicious software, or malware is an umbrella term to cover any code or content that could have malicious, undesirable impact on systems.

Managing User Privileges – giving users unnecessary system privileges or data access rights means that if the account is misused or compromised the impact will be more severe than it needs to be.

Monitoring – good monitoring is essential in order to effectively respond to attacks and is often a key capability needed to comply with legal or regulatory requirements.

Network Security – by creating and implementing some simple policies and appropriate architectural and technical responses, you can reduce the chances of these attacks succeeding (or causing harm to your organisation).

Removable Media Controls – removable media provide a common route for the introduction of malware and the accidental or deliberate export of sensitive data.

User Education and Awareness – users have a critical role to play in their organisation’s security and so it is important that security rules and the technology provided enable users to do their job as well as keep the organisation secure.

First we work with you to understand your business services and assets, and how you interact with your customers and third parties.

Then we walk you through the ‘10 Steps to Cyber Security’, to ensure you understand the scope of each step, and are able to identify the appropriate stakeholders for initial interviews. At this time, we will agree the resources required to support the review.

Once the review of the resource, and the stakeholder interviews are completed, we are able to assess your organisation’s capability against the 10 steps Your buisness’s maturity level will then be determined by referring to a Capability Maturity Model (CMM) based on an industry standard methodology, providing a maturity score between 0-5, where 0 is non-existent and 5 is optimised.

The findings are then formalised in a written report, which provides a CMM score and recommendations against the 10 Steps, and prioritises recommendations to fast-track your maturity.