A design for security controls upgrade
This service has been developed for institutions where conducting a full security audit and risk analysis prior to making a decision on changes in the security system would not be economically viable.
The aim of this service is to introduce such changes in IT security controls that will allow for optimisation of the system’s security and costs. At the initial stage, together with the Client, we identify those elements of the IT system that are of key importance for security. Further work focuses mainly one these components.
The design’s scope covers:
- identification of the most significant threats (in cooperation with the Client),
- assessment of the current state for the indentified key areas of information processing,
- presentation of the current state and proposed changes and discussing these issues with the Client,
- preparation of recommendations on the upgrade of the security controls in the key areas.
Recommendations do not suggest any particular products, only technologies (e.g. a firewall with the following attributes ...). If a Client wishes so, we can prepare a presentation of selected products that fulfil the assumptions resulting from the analysis.