 |
|
|
|
|
The mission of Strategic Technology Systems is to align our security expertise with your business strategy. Our
security consultants have extensive backgrounds in the areas of risk analysis, vulnerability assessment, penetration
testing as well as an in-depth knowledge of regulatory requirements facing your organization. Our security consultants
also maintain numerous technical certifications, which allow us to not only discover vulnerabilities, but also provide
suggestions and assist with the implementation of improvements.
At Strategic Technology Systems we use industry standard tools and techniques to conduct all of our Vulnerability
Assessments and Penetration Tests. Your organization is not only faced with technical challenges, but must also
overcome organizational and regulatory obstacles. Strategic Technology Systems takes a holistic approach to
conducting Vulnerability Assessments. Not only does our assessment concentrate on the technical infrastructure, but
we also assess the design and implementation of your organization’s security program. Our unique assessment
methodology provides a complete view of your organization’s security posture.
|
|
|
Strategic Technology
Systems provides your organization with the expertise needed to improve your security posture, increase efficiency and
reduce costs. Some of the intrinsic benefits of a Vulnerability Assessment conducted by Strategic Technology Systems
are:
Proactive identification and remediation of risks facing your organization.
Provide a better return on your organization's IT security investment.
Provide your organization with "insurance" that your IT environment is operating in a secure manner.
Gauge the improvement or deterioration of your organization's security posture.
Comply with the rigorous demands of industry regulations such as SOX, HIPAA, BS7799, etc...
|
|
|
Strategic Technology Systems employs a “White-Box”
approach to vulnerability and penetration testing. Our
staff of certified security consultants will analyze your
current IT and organizational environment to gain a better
understanding of your network infrastructure. Empowered with this information,
our security experts will use industry standards and
control requirements to actively locate and verify vulnerabilities
that exist within your organization. This holistic
approach allows us to provide a complete security overview
which parallels the regulatory requirements of your
industry. Our assessments are built on frameworks such
as Control Objectives for IT (COBIT), ISO 17799, the
Information Security Form Standard of Good Practice (ISF),
and others. Some of the standards and controls utilized
during an assessment include, but are not limited to:
Sarbanes-Oxley Act (SOX)
Gramm-Leach-Bliley Act
Health Information Portability and Accountability
Act (HIPAA)
Standards presented by the Information Systems
Audit and Control Association (ISACA)
The Federal Information Security Management Act
(FISMA)
|
|
|
|
|
|
Risk
Analysis
