SavantiCyber Security Assessments: Understand where you are and fast track the right improvements
At Savanti we have developed our Cyber Security Controls Framework as part of our cyber security assessment service, consisting of 15 domains that cover the governance, organisational and technical security requirements that make for good cyber security setup in the workplace. These controls are not new but are grouped into coherent domains that reflect modern threats and the actual causes of incidents, to provide a pragmatic model to implementing a strategic response to cyber risk.
Using our Framework we assess the key aspects of security risk to the information, systems and infrastructure in order to provide you with swift analysis of your cyber security maturity, rate existing cyber security controls and help you shape your information security programme.
Like all Savanti services, this is based on many years’ knowledge and experience gained from protecting organisations of all shapes and sizes to help you focus on the real risk areas. It’s simple to implement, and ensures you get the most out of your security investment.
The framework is made up of controls underpinning the requirement for each domain. The individual controls are assessed to provide a maturity score for the domain, and accelerated remediation plans to meet your desired levels of maturity. The output of our assessments is a report consisting of an executive summary showing the overall maturity of your organisation and key improvement actions to take; with a detailed domain-level findings and improvement roadmap.
The controls are mapped to common industry standards and frameworks to support external compliance activities where appropriate and measure cyber security compliance.
We have extensive experience in performing cyber security assessments to ensure you have effective information security controls in place and that you comply with relevant standards and regulatory requirements:
- Performing detailed information security measurement and tailored reviews of specific areas such as data loss, infrastructure security components and physical security to ensure that the processes and controls in place are effective at mitigating security risks
- Assessing your level of compliance against the 12 requirements of the Payment Card Industry Data Security Standard (PCI – DSS) to support you in completing your Self-Assessment Questionnaire (SAQ) or to prepare for an external audit from a Qualified Security Assessor (QSA)
- Performing audits of critical third parties and suppliers who store and process your data to provide assurance that they meet both your security requirements and the contractual obligations in place
- Assessing software security maturity using the OWASP Software Assurance Maturity Model, to ensure that your software is free from security vulnerabilities at any point during its lifecycle, that could lead to service and information compromise
For more information view our Cyber Security Assessment service overview
Case Study
Explore some of the ways we’ve delivered strategic security consultancy services to various clients across multiple industries
