The consulting in Information Security
The best Security systems are inadequate if the people who are handling the corporate information are not prepared to cope with the growing threats that threaten this precious asset.
Weak and shared passwords, abuse of the Internet and the e-mail, social engineering attacks, misuse of the badge, carelessness of business tools, inadequate processing of documents, failure to adhere to policies and procedures or simple neglect: these are just some of the vulnerabilities related to the human factor on which the technology alone can do little.
What we care about is to make everyone understand that acting safely is good for the corporate employees as well as for the Company.
To achieve an acceptable level of knowledge is often required only small changes in the behavior.
Our experience leads us to define two areas of operation:
-
the precise one, which can address the known problems with the creation of Security micro seminars;
-
the complete scenario, that will start from a risk analysis who will allows to verify the infrastructure, the problematic areas, the processes and the existing regulations, to identify the mitigations tasks, up to develop a communication plan and tranining culminating with the final measurement of the program through feedback and benchmarks.
Our staff is certified CISM (Certified Information Security Manager) and CRISC (Certified in Risk Control and Informations Systems) accredited to the major international professional association ISACA. We have the necessary experience to conduct Compliance audits based on the principal regulations as well as to activate a Control Plan prepared in accordance with international best-known methods (ISO, COBIT, Val IT and Risk IT), everything in a simple manner avoiding to overcomplicate.
Besides these activities, in the broadest sense, we are available for a Company check-up that allows verification of the coverage from a regulatory, information technology, physical, strategic and organizational point of view, as well as assistance in the evaluation and selection of those business programs and systems that you need. The solutions that are identified will be carried out directly by us or with the support of our selected long time partners.
For any problem please contact us without hesitate, we will be happy to find the best solution for your needs.