| |
Regulatory Compliance
Security Assessments
Risk Assessment
Chief Security Officer service
|
|
Risk
Assessment
OCTAVE Methodology
Netanium can assess your company exposure to risk utilizing OCTAVEŽ(Operationally Critical Threat, Asset, and Vulnerability Evaluation). OCTAVE is a risk based strategic assessment and planning technique for security. OCTAVE combines Security Practices, technology and operational risk. Our resources are OCTAVE certified and ready to apply our expertise for your organization. For more information about OCTAVE, please visit the following website:
http://www.cert.org/octave/
COBIT
COBIT is short for Control Objectives for Information and related Technology. It's an open standard for good Information Security and control practice. It includes three hundred specific control objectives and includes a framework and audit guide for over 30 information technology processes.
ISO 17799
ISO 17799 is a comprehensive set of controls comprising best security practices. It provides a defined process to evaluate, implement, maintain and manage information security. A company that complies with these very comprehensive standards not only has very sound and thorough policies and procedures, but certification can become an effective marketing tool, as has happened with ISO-9001 Quality certification.
There are ten areas of compliance that must be addressed:
• Security Policy
• System Access Control
• Computer & Operations Management
• System Development & Maintenance
• Physical & Environmental Security
• Compliance
• Personnel Security
• Security Organization
• Asset Classification & Control
• Business Continuity Management
Netanium can help your organization become compliant in the ten ISO 17799 areas of compliance.
Visa CISP Assessment
Any merchant that accepts credit cards should consider becoming Visa CISP (Cardholder Information Security Program) compliant. If you are a merchant processing more than 20,000 transactions per year, there are legal requirements that you have to ensure that confidential information is not being compromised. By not being certified, your company can be fined up to $500,000 per incident.
Netanium can help your company meet your legal requirements as a merchant and provide pre and post CISP Assessment.
Mastercard SDP Assessment
Much like Visa, Mastercard's SDP (Site Data Protection Program)
|
|