Informatic Intelligence’s Information Security protects the organization’s assets related to information management: infrastructure, data and application systems addressing the three security pillars: Integrity, Availability and Confidentiality.
- Compliance
Our customized approach applies practice elements from well known standards such as COSO, ISO-27001, ITIL, COBIT and NISP-SP800 and provides compliance with industry specific laws and regulations such as HIPAA, GLBA, SOX and PCI-DSS besides the unique business requirements for the organization
- Assessment
The two objectives of the Information Security Assessment are to identify and document all the assets in order to establish their value and to identify the gaps and improvement opportunities for the current protection strategies.
- Classification
Classification of data and application systems provide the availability and protection requirements during their lifecycle.
- Protection
Protecting the information implements and enforces:
-Access Controls: From application systems, storage, servers, networks and databases
-Production and non-production environments with Test Data Management and Data Privacy for sensitive information
-Network security at all seven layers from the OSI model with firewalls, Intrusion Detection and Intrusion Protection Systems (IDS & IPS)
- Monitoring and Testing
Custom designed penetration testing and comprehensive monitoring including SIEM technology
- Risk Management
-Identifies Threats and Vulnerabilities
-Establishes the likelihood of exploits from exposures
-Measures the impact of potential threats
-Implements countermeasures
-Qualifies residual risk