The Cyber Security Assessment
A cybersecurity assessment is a process of evaluating an organization’s information systems and security measures to identify potential
vulnerabilities and threats. The assessment may involve reviewing the organization’s policies, procedures, and technical controls to ensure they are effective in safeguarding against cyber attacks.
The ultimate goal of a cybersecurity assessment is to identify weaknesses and gaps in an organization’s security posture and provide
recommendations to improve its overall security level. The assessment can help organizations to identify and mitigate potential security risks, improve their overall cybersecurity strategy, and better protect sensitive information from unauthorized access or theft.
Optionally after concluding we can perform a penetration test, also known as a pen test, this is a cybersecurity technique that simulates a realworld cyber attack on an organization’s network, applications, or systems. The goal of a penetration test is to identify vulnerabilities in the organization’s security controls that could potentially be exploited by attackers.
Methodology
Scoping
& Risk Assessment
Identify and create an inventory of all physicaland logical assets that are within the scope of the risk assessment
Identify
Potential Threads
Tactics, techniques, and methods used by threat actors that have the potential to cause harm to your assets. Determine the types of protection needed
Analyze Risks &
Determine Potential Impact
Score and prioritize identified threats and their impact to your organization.
Plan Mitigation
& Remediation
Create a plan of mitigating actions based on the priorities set out in the previous step
** we follow the ISO 27001 guidelines and best practises
Methodology
Scoping & Risk Assessment
Identify and create an inventory of all physicaland logical assets that are within the scope of the risk assessment
Identify Potential Threads
Tactics, techniques, and methods used by threat actors that have the potential to cause harm to your assets. Determine the types of protection needed
Analyze Risks & Determine Impact
Score and prioritize identified threats and their impact to your organization.
Plan Mitigation & Remediation
Create a plan of mitigating actions based on the priorities set out in the previous step
** we follow the ISO 27001 guidelines and best practises
The Process
External evaluation of your organization to assess existing posture (email, domains, 1 DNS, web service)
Interviews with key stakeholders (Head of IT, C-Level executives, DPO, HR) to identify policies in place and alignment check with industry trends
Evaluation of information security policies and assess alignment with industry trends and standards (for example, against ISO27001
Vulnerability scan of your external services (with known tools). Optionally, vulnerability scan of your internal resources
Evaluation of results and conduct of gap analysis, presentation & discussion with teams
Report generation that will include our recommendations for mitigating steps and recommended actions (for example, improve web security & perform penetration test on high risk systems)
How safe are you?
It is not a matter of if, but a matter of when, your organisation will experience an attack.
Are you ready?
