Information & Risk ManagementInformation Security, in our opinion, should be considered a business or organisational issue. It should be considered
part of the business model and paid particular attention to, no matter how large or small the organisation.When devising strategy and deploying solutions, it is essential that importance is placed on managing the risk associated
with the bigger picture. Affinity offers advice at the higher level,
helping the decision makers set their strategy.
|
Information Security AwarenessAffinity can
work with your organisation to promote an awareness and understanding of Information Security. Perhaps a director wants to
understand the implications of offering a service? A business hat as opposed to a technical one is therefore required. Alternatively,
a technical administrator wishes to understand how to protect a particular piece of technology or seek advice on a line of
defence? We will tailor our advice to meet the need.
|
Policy Design & ReviewBefore
tackling a technical solution, attention should be given to what a service should and should not provide. This is again, a
high level management issue and needs to be addressed ideally before design or deployment occurs. In addition, should you
wish to tighten your organisation's current Information Security, Affinity can help you with the following:
- Develop security policy & procedures
- Audit your current implementation
- Identify any gaps
- Close
/ reduce the gaps
|
Assurance Services
How Strong Are Your Defences?
We provide a range of testing
or assurance services to our clients. From our entry level vulnerability assessment to comprehensive penetration testing clients
can feel secure that they are getting a superior level of service in terms of technical ability and industry professionalism.
- Vulnerability Assessments
- Penetration Testing (Ethical Hacking)
- SafetyNet IP
- Application Security Testing
- Server Hardening
|