SECURELINK AUDIT AND ASSESSMENT

THREAT AND RISK ASSESSMENTS

Vulnerabilities to assets can be identified through consideration of the potential threats, whether they be deliberate, accidental, or environmental, to the:

• Confidentiality of systems and information
• Integrity of systems and information stores; and/or
• Availability of systems and the information that they contain

SecureLink’s Threat and Risk Assessments (TRAs) provide a framework whereby owners and operators of key business units can assess security risk exposures faced by their key business enablers and implement security controls to manage these risk exposures within acceptable limits.

SecureLink has performed TRAs against a large number of organisational systems and environments, for clients within Industry, Government and Defence.

SECURITY REVIEWS AND AUDITS

Audits and reviews are essential to ensure that security practices are in compliance with system and site security plans, not breach any policy outlines and to ensure management and user involvement in protective security.

SecureLink consultants objectively audit Information Security Management System (ISMS) to see if security controls have actually come to fruition and the ISMS framework is effectively in place.

Reviews are conducted by specialised and experienced professionals to search for evidence that the controls are in place in accordance with best practice. In addition to this, SecureLink’s experienced consultants prioritise Governance controls to address high-priority threats first and then ensure that corrective or preventative controls are operating effectively.

VULNERABILITY ASSESSMENTS

Vulnerability assessments identify and suggest controls to counter opportunities from malicious threat sources. A proactive approach to actual or perceived weaknesses is highly recommended before others find and exploit information assets.

SecureLink tailors Vulnerability Assessments (VA) and Penetration Tests (Pen Tests) to suit threat profiles and offers White Box assessments that comprehensively test systems and environments with organisational assistance, Black Box assessments that are designed to focus on external threats and code / documentation review assessments.

SecureLink’s highly experienced consultants are able to provide a complete test of systems and environments within pre-agreed terms of reference.