System architecture audit
System structure, network connections and placement of security controls.
IRKASEC / CYBER
Cybersecurity
Vulnerability assessments, penetration testing, IT audits and phishing simulations.
Testing scope and approach
Approved systems, methods, time windows and limitations are defined before testing. The engagement includes technical checks, finding validation and reporting for IT and management.
- Written authorisation and agreed scope
- Evidence and prioritised findings
- Remediation plan and retesting
IT security audits
Review of organisational and technical information system safeguards.
In cooperation with QSCert.
IT audit detailsInternal threat audit
Risks associated with employees, external personnel and visitors.
Access and authorisation audit
Login security, user accounts and assignment of access rights.
Backup audit
Protection of data backups and organisation of backup centres.
Recovery planning audit
Emergency procedures and restoration of system operation.
Malicious content protection testing
Checks of protection against spam, trojans and other threats.
Technical testing and assessments
Vulnerability assessment
Internal networks, publicly accessible systems, services and configurations.
Penetration testing
Internal and external penetration testing within a written authorised scope and rules of engagement.
Web applications and APIs
Authentication, access controls, business logic and technical controls.
IT audit
Review of controls, documentation, configurations and IT risk management.
Phishing simulations
Controlled simulations, results analysis, brief training and reporting.
Remediation and retesting
Priorities, an action plan and verification of corrective measures.
Reporting
For management
Business impact, priorities and a summary of recommended actions.
For the IT team
Technical findings, evidence, risk ratings and recommended corrections.
Tracking actions
Action owners, deadlines and final verification status.
MatrixScan platform
Manage assessments, findings and retesting.
CONTACT
Contact detailsSecurity assessment scope
System type, authorised scope and intended timeframe.