March 7, 2021
Hybrid IT Security Audits
Our goal is to quickly identify gaps, vulnerabilities and errors in companies’ security systems to eliminate them and improve all processes taking place in the company. Our goal is to present optimal, effective and independent technological (IT), organisational and legal solutions.
We carry out tailor-made, dedicated audits in the field of IT and information security, which can be performed both on-site and remotely.
Service main aspects:
- gray-box, white-box, black-box methodology;
- automated and manual operations;
- penetration tests;
- interview, recognition and consultation;
- analysis of organisational, procedural and political solutions in the field of IT security
- and information;
- IT security audit of all IT infrastructure software and hardware assets;
- educating and raising awareness on an ad-hoc basis for colleagues;
- online or on-site meeting discussing the audit and report;
- physical and environmental security and access control;
- testing the correct implementation of security solutions, business continuity plan, backup, encryption and technical documentation;
- verification of the protection level against malicious software, internal and external malicious activities, leakage, theft, data loss, sabotage;
- social engineering and phishing tests, building conscious and safe use of IT tools;
- compliance verification with applicable standards (e.g. from the ISO 27k family), regulations and best practices, and the interpretation in this area, including in the scope of GDPR.
Our Hybrid IT Security Audit Services can handle mainly:
- ICT Infrastructure
- Web applications
- Mobile applications
- Client applications
- Cloud infrastructure and services
- Wireless, network, VPN, VoIP
- PCs, laptops, servers, mobile devices, virtual environment
- Code and configurations
Hybrid IT Security Audits is closely related to Vulnerability Management Services
Read more:
March 7, 2021
The vast majority of attacks are based on human weakness, recklessness, naivety or, finally, ignorance of personnel at any level. Our activities, both as part of audits and training courses, include social engineering. We examine the resistance of organisations and people in various positions to social engineering attacks. Simultaneously, during audits and training, we teach […]
March 7, 2021
One of the elements of maintaining an appropriate cybersecurity level is detecting and removing vulnerabilities in the ICT infrastructure. These are continuous, cyclical and random processes, e.g., introducing a new service, a new application or changes. Our services cover the entire vulnerability management process cycle, i.e. resource identification and prioritisation, vulnerability detection, and weighting. The […]
March 7, 2021
Electronic Surveillance Detection
The purpose of bug sweeping is to detect and eliminate devices used for unwanted acquisition of information and recording of sound or image. The service is provided with the use of our equipment and personnel. The service is often used before important meetings are planned or in the face of uncertain external and internal conditions […]
