Information Security

The information security services we offer are listed below.

• Data Protection & Privacy
• Cyber and Infrastructure Security
• Security Assurance
• Security audit - Governance, Risk & Compliance
• Identity and Asset Management
• AMP for Endpoint

Security Audits

A security audit evaluates a company's information system by confirming that its security procedures, product and service compliance are in place. It examines the software, user procedures, physical accessibility, and security of company devices.
These rules look at how security is handled within the company, including how users share data, how risks to the network are analysed for their root causes, and whether or not suitable logs are being kept for all user actions on the network.

Key findings from security audits include:

• If the password is easily hackable or not?
• If proper logs are maintained for every user activity or not?
• If the logs are checked on a timely basis or not?
• If the operating systems match the company security policies or not?
• If there are any suspicious applications running within the network or not?
• What back up measures are taken and when were they last taken?
• What cryptographic tools have been used?
• If there are any company regulated documents for compliance or not?
• What are the flaws in the network, what access is available to the company users which shouldn’t be available?

Our team specialises in carrying out network audits and security audits by evaluating whether the network setup is in line with the compliance/policies of the firm or not.

Endpoint Security

• In order to access the corporate network, each device must adhere to a set of standards, which is known as endpoint security. Endpoints may include devices like desktops, laptops, mobile phones, tablets, etc.
• Endpoint security in information security refers to safeguarding business assets by securing corporate devices, as each device with network access or remote network entry creates a possible point of entry for security threats. Endpoint security is designed to safeguard every single networked device.
• A centrally controlled server maintains the security of all your endpoint devices in the client/server architecture of endpoint security. However, if the endpoint is connecting to the network remotely, the server programme verifies the user credentials and checks the corporate assets to ensure that the device complies with the company's security regulations before granting access to the corporate network. Devices that violate business policies will be placed in a different VLAN.
• Simple form endpoint security in personal firewalls and internet security proxy etc.