Current State Assessment
Mitigating threats before they become attacks
Assessing Your Security Posture: Benchmarking Against Best Practices and Mitigating Risks
Current State Security assessment is performed to identify the Client’s Information Security Current State compared against good practices and industry standards and to define the maturity ratings and risk ratings for each of domain areas identified as part of scoping.
Our Information Security Assessment Services Methodology:
- Conducting interviews/meetings with Client’s stakeholders to understand their current information security practices and planned initiatives.
- Performing an analysis of key Information Security documentation, including policies, procedures, standards, and guidelines.
- Assessing Client’s Information Security Current State against good practices and industry standards.
- Utilizing our in-house developed Security Framework, which aligns to industry standards, including ISO/IEC 27001.
- Measuring against the UAE information security standards like UAE-IAS (Nesa/Sia) and DG-ISR.
The assessments will be done on, but not limited to the following domains
Current State Assessment (CSA)
Application
Security
Security
Physical
Security
Security
Network
Infrastructure
Infrastructure
Controls and Configurations of all security solutions
People
Security
Security
Vulnerability Analysis and Threat Analysis (VA/PT as an optional add-on service)
Access
Control
Control
Cloud and Network Architecture Review
Code
Review
Review
Wireless
and VOIP
and VOIP
Existing Policies Procedures and Standards
Our Current State Gap Assessment Methodology Utilizes Below Framework
Empowering Your Risk Management with Industry-Standard Methodology
Low
Basic undocumented, changing capability is in place with some technology and tools; limited local processes, and limited organizational support.
Partial
A partial capability is in place with a combination of some technology and tools; local processes covering some regions/business units or processes are repeatable, but may not be good practice or maintained; and limited organizational arrangement to support good practice.
Defined
A defined capability is in place with significant technology and tools for some key resources and people; processes defined for some regions and/ or business units; and organizational guidance is in place for some key regions and/or business units.
Mature
A mature capability is in place with advanced technology and tools for some key resources and people, consistent processes exist for some regions and/or business units, and some governance is in place (accountability/responsibility/metrics) for some key regions and/or business units.