Threats to your data never go away.

Neither should your security partner.

phone 614.819.0151

Security Assessments

A security assessment is a method of evaluating security by comparing a company's security controls against a known standard to answer two key questions:

  • Are the controls currently in place in my environment reasonable and appropriate?
  • Are the controls currently in place in my environment effective?

 

Based on standards, customized to meet your needs

Jacadis assigns an experienced team the objective of reviewing your existing security plan and controls against a standard (or standards).

Our experience allows us to expertly work with a variety of standards, applying one or more standards to each test. Typical standards used in security assessments include:

  1. 1. PCI DSS 2.0
  2. 2. HIPAA / HITECH
  3. 3. NIST 800-115 for FISMA compliance
  4. 4. OWASP

 

The best place to begin is:

  • Security Plan and Controls Review and Assessment: The core foundation of any security assessment is the selection and application of security standard compared to your existing security plan and controls.

 

Other tests may be applied to the information gathered to fully execute a Security Plan and Controls Review and Assessment or they may be executed on their own to answer concerns about your security environment.

These tests include:

  • Network Security Assessment: Identifies vulnerabilities that an attacker could use to gain unauthorized access to internal systems. Projects are scoped based on internal and external attack vectors and numbers of targets on the network.
  • Wireless Security Assessment: Identifies and exploits vulnerabilities that an attacker could use to gain unauthorized access to internal systems through known and unknown (rogue) wireless access points. Projects are scoped based on number of locations and number of access points.
  • Web Application Vulnerability Assessment: Identifies and exploits vulnerabilities that an attacker could use to gain unauthorized access to web applications or the infrastructure supporting them. Projects are scoped based on number of applications and transactions within the application.
  • Physical Security Assessment: Identifies and exploits vulnerabilities that an attacker could use to gain unauthorized physical access to internal systems or physical information assets. Projects are scoped based on number of locations.
  • Social Engineering Assessment: Identifies and exploits vulnerabilities that an attacker could use to gain unauthorized access to internal systems through the application of social engineering attacks on employees or social media properties.
  • Custom Security Assessment: Jacadis provides penetration tests of other form factors. Talk to us about your organizational needs for scoping information.

 

Request for information

This field is required.
Valid Email is required.
This field is required.

Blog

View All

Latest Tweets

Copyright © 2013, All rights reserved by Jacadis, LLC | Information Risk Management

designed & developed by NPM