comprehensive services

Security Assessments

• IT Risk Assessment: Evaluation of risks and associated controls from the use of information technology at your organization.
• Network Security assessment/Penetration Testing: Detailed evaluation of security control effectiveness for a variety of operating systems, Internet connectivity and workstations.
• Security Strategic Planning & Implementation : From enterprise security planning and policies to implementation of security at the server level.

Business Continuity Planning:

• Business Continuity / Disaster Recovery Plan Development
• Disaster Recovery Testing: Assist with either management or quality assurance during a disaster recovery test.
• High Availability Planning Design & Implementation: Assessment, design and implementation for systems that have to be operational 24/7.

Regulatory & Compliance:

• Privacy Regulations: Helping you secure data in compliance with industry standards, such as HIPAA and GLBA, including gap analysis, implementation of security requirements, and annual compliance reviews.
• Sarbanes-Oxley: Assist you with the IT requirements of Sarbanes-Oxley compliance from planning, documenting IT controls, testing controls and working with you through the remediation of control weaknesses.
• Banking Regulations: Help you meet the regulatory requirements per the guidelines of the OCC, FDIC, OTS and NCUA.
• ISO 17799 / BS7799 Compliance: Assist with the complex requirements of ISO 17799 compliance.

Assurance/Trust Services:
AICPA-developed services–

• SAS 70 Internal Controls Review: For engagements to document, validate and verify the internal control systems in an organization. used by third-party auditors and agencies.
• SysTrust Systems Reliability Assurance: For engagements to report on the availability, security, and integrity of information systems in an organization
• WebTrust Review: For engagements to report on the effectiveness of controls of an organization’s Web site
• Agreed Upon Procedures

Computer Forensics:

• Electronic Fraud Investigation: Analysis of electromagnetic information and associated impairment
• Digital Information Investigation: Location, retrieval, and analysis of digital data
• Key work searches for specific data and data recovery

IT Audit Support:

• External Audit/Information Evaluations: Help financial audit teams with the evaluation of internal information systems controls.
• Agreed-Upon Procedures: Perform information systems controls evaluations as agreed wit the client.

IT Internal Audit Support:
Help you with various IT internal audit needs.

Application Security Control:
Assessment of business security controls, data interface controls for ERP systems