True's information security risk assessment will identify what you are currently doing to protect your information, assess its effectiveness against industry standard, inform you of your current risk, and give you customized priorities for moving your company toward an improved security posture. The assessment is based on the information security principles defined in the internationally recognized standard ISO/IEC 27002 (formerly ISO/IEC 17799:2005).
A True Information Security Risk Assessment looks at your business holistically. True's certified professionals will interview key personnel across your organization examining the following areas:
- PROCEDURAL SECURITY
- Information Security Policies and Documentation
- Information Security Management
- Personnel Security & User Training and Awareness
- Information Security Incident Management
- Business Continuity Management
- Compliance
- PHYSICAL SECURITY
- Secure Areas
- Asset Management
- TECHNICAL SECURITY
- Protection Against Mobile and Malicious Code
- Back-up
- Electronic Commerce Services
- Monitoring
- User Access Management
- Access Control
- Correct Processing in Applications
- Cryptographic Controls
- Configuration and Change Control
Upon completion, you will receive a comprehensive report detailing the findings and recommendation for each area investigated as well as a high level picture of your company's overall status. True will develop a customized remediation road map based on the gaps identified. True's report will equip you with the knowledge necessary to reduce your company's risk.
Benefits:
- True's reports are comprehensive and user friendly, giving you practical results and recommendations you can actually implement.
- An information security risk assessment is a great place to start if you are unsure of your specific security needs. The assessment will give you a comprehensive picture of your current efforts and help you jumpstart focused remediation.
- True's approach is personal. We will interview your key personnel, from HR to IT system administrators to gain an understanding of your company's operations.
