Home : Practice Areas: Security : Security Audits

“I want to thank CIS for your years of support at both my positions.  Your expert service and customer focus is second to none.  You certainly lived up to the promises you made the first time we met.”

Mitch Silvermintz
Local Initiatives Support Corporation

Security Audits

CIS can provide detailed Security Audit services for your organization.  The process of performing a Security Audit typically includes, but is not limited to, the following services:

• Overall assessment of policies and procedures as they pertain to corporate security
• Review of topology to identify potential design issues that would increase security risk
• Analyis versus compliance requirements imposed internally or externally
• Basic penetration testing
• Examination of job responsibilities of internal personnel as well as requirements of external contractors

In some cases, firms in different certain verticals need to comply with various regulatory bodies and legislation, such as:

• Sarbanes-Oxley
• HIPAA
• Securities and Exchange Commission
• FFIEC

Each of these entities has their own set of requirements.  We review the current state of your organization and attempt to make recommendations to prepare for a formal regulatory audit.  We have familiarity with all of the above, and more.

At the end of the exercise we will also provide an executive level document indicating clearly, to non-technical personnel, where the budget should be focused to diminish risk.

support@ciscony.com