T3i :: Services :: Risk Assessments

SERVICES RISK ASSESSMENTS

As an initial step towards strengthening security, lowering operational costs and simplifying the compliance process, a comprehensive Risk Assessment will be performed. The baseline assessment includes: the existing information systems, information security policies, procedures, critical business processes, network infrastructure and communication systems.

Our expertise covers several areas of Risk Assessment:

Independent Security Posture Assessments (SPA ™)
PCI DSS Auditing and Compliance (T3i is a Certified QSA)
BPO Vendor Compliance Auditing and Evaluation
HIPAA , GLBA and SOX Compliance
Remediation Project Plan Development and Oversight
ISO17799/BS7799 Auditing and Evaluation
SAS 70 Assessment services Type I and Type II
Network Security Architecture and Design
Enterprise Security Policy Evaluation and Development

The purpose of the Risk Assessment is multifold:

To identify all of the assets and vulnerabilities within your information security network.
To perform a GAP analysis of the delta between existing configurations, processes, policies and regulatory requirements and industry best practices.
To serve as a baseline assessment in preparation of an internal or external audit and for all future information security program initiatives.
To develop an action plan and recommendations for corrective measures of vulnerabilities found during the baseline Security Posture Assessment.
To provide a roadmap for compliance with regulations including HIPAA, GLBA, PCI DSS etc.