|
Home > Core Competencies > Security and Compliance
The Core BTS Information Security Services Practice offers assessment
and consulting services to organizations of all sizes across diverse industries.
Our projects are delivered by highly skilled consultants using proven methodologies
that are customized to address the unique business objectives, risk profile,
and compliance requirements of each client. We utilize our extensive experience
and information security expertise to help you identify, understand and remediate
security weaknesses and vulnerabilities related to people processes, and technology.
- Automated scans and manual testing to determine technical vulnerabilities of external and internal systems and network devices.
- Platform-based analysis of security controls on representative sample of key systems and network devices.
- Interviews with operational personnel to review architecture and discuss internal processes and procedures related to information security
- A high-level assessment of the current information security program as aligned against the backdrop of leading practices such as the ISO 27001 Information Security Standard.
- Internal and external penetration testing to validate physical and logical security controls and assess security awareness, intrusion detection, and incident response capabilities.
- Interviews to review the application’s business function, architecture, technology platform, and critical processes including development, maintenance, and operations.
- Automated and manual testing to identify Web application vulnerabilities from the perspectives of both an authenticated user and a potential attacker with no provisioned access.
- Automated scans and manual testing to determine technical vulnerabilities of external and/or internal systems and network devices.
- Review and analysis of wireless architecture design and sample access point configurations.
- On site analysis and assessment to determine signal exposure/leakage, information disclosure, rogue access points, weak protocols, and wireless security vulnerabilities.
- Development and delivery of a custom-tailored Information Security Awareness workshop presentation.
- Review of existing security policy documents to conduct a gap analysis that is based on industry accepted frameworks and identifies deficiencies in security policies and business processes.
- Augmentation of existing documentation to address policy gaps and to align policy with existing business processes while incorporating leading practices to enforce business objectives and regulatory requirements.
|
