Risk & Compliance

Cybersecurity need not be a minefield. As a starting point, it is really important to ensure you get the basics right as without these you leave yourself open to compromise unnecessary, even with a hefty investment in security measures it is important to ensure this is the case ongoing. People, employees are one of our greatest assets in business however we are human. We can work with you to identify, support any gaps you have that need closing, and in doing so the governance, processes that assure that is the case ongoing. 

Here are some areas for consideration,

Risks identified 

• Applied to a Risk register
• Regularly tracked and mitigation review
• Risk Register signed

Infrastructure operations maturity such as 

• System/ Device Build Standards
• User Account control inc password policy
• Governance of New Starters, leavers, role changes
• IT Hygiene Transparent reporting
• Change Control
• Penetration testing
• Firewall policy management
• Data encryption (and key management)
• Certificate management

Cyber Insurance

• Policy understood and IT governance assured to meet policy conditions

Business Continuity Planning

• Backup policy and process in place
• Backup recovery procedures proved (per quarter)

Cybersecurity Management

• Owner
• Security Incident Response Team