Executing a purposeful action plan, coupled with useful technical controls, will provide you with the assurance that you, your principals, your shareholders, your management, and your regulators require.

Incident Response
The goal of Incident Response is to get your employees back to work with systems they can trust. Being prepared to respond to the problem before it happens is how you meet that goal. We can help you prepare for the worst and quickly clean up the mess when it strikes.

Security Auditing
Auditing provides assurance, assurance that you are complying with your own policies as well as complying with industry best practices and government regulation. Your auditor should be able to review the technical details of your infrastructure deployment as well as reviewing policy. Technical auditors should be certified in the systems they audit.

Security Assessment
Vulnerability assessments are done it two phases, identification and then assessment. Identifying hosts connected to your infrastructure can, for example, assist in finding rogue systems installed without approval. In the assessment phase, your systems are checked for known vulnerabilities, which could be as simple as a missing patch or a mis-configuration of the firewall that is allowing inappropriate traffic to enter or leave your network.

Information Security
Program Development
Any size organization can benefit from having a program. Many organizations treat Information Security in too casual a manner. A program need not be an enormous undertaking or represent a huge cost to the organization. Just putting the fundamentals in place can get you most of the way there.  

• Policy Development

• Risk Analysis

• Security Training

Subscribe to the Security Volition Gazette for interesting security-related news. E-mail to GazetteSubscription@SecurityVolition.com