Security

Security of organization, company or institution

Climate for securing organization’s prosperity and often even its bare existence is getting more and more severe. Companies have to face an increase of competition, criminality and the risk of terrorist attacks. Threatening factors also include the effects of natural forces which must not be underestimated. Simultaneously, organizations witness concentration of values, mainly due to a rapid development of information technologies. Value of information is being continually increased as well as organization’s dependence on an information system (IS) which is in place to process such information in a safe and reliable way.

Security of Assets and Human Resources

In order to ensure stability and efficiency of any organization under such conditions it is necessary to provide security of human resources as well as of tangible and intangible assets of the organization – mainly the information, intellectual property etc. Investments made in the area of security are getting greater thus it is necessary to make sure they are used properly, purposefully and efficiently. Everyday practice shows that the most reliable and efficient security solutions arise from turn-key attitude. Partial solutions combined with additional measured can later turn out to be too expensive or – even worse – useless and non-effective.

In the area of security we will provide you with the following:

Audit

1. Initial security audit
2. Audit of compliance with ISO 27001
3. Audit of compliance with legal requirements
4. Penetration tests

Analysis

1. IS description
2. Analysis of IS risks
3. Analysis of organization risks
4. Business impact analysis

Strategy

1. Information security strategy
2. IS continuity strategy

Policy

1. Organization security policy
2. Information security policy
3. System security policy

Operation of ISMS

1. ISMS (Information Security Management System)
2. Security project
3. Continuity plan
4. Development of security precautions
5. Security guidelines for security administrator
6. Security guidelines for administrators
7. Security guidelines for users
8. Support of ISMS operation
9. Monitoring and evaluation of incidents
10. Training schedules
11. Audit schedules

Overall Security Solution

1. ISMS in compliance with ISO/IEC 27001
2. Preparation for ISMS certification
3. ISMS training and methodology
4. Preparation of complete IS security documentation
5. Preparation of security documentation pursuant to Act No 412/2005 Coll.

Riskan

1. Product delivery
2. Training
3. Training together with risk analysis
4. New profile insertion into SW

Training

1. for users
2. for security managers
3. for management

Security Consultancy

1. Consultancy related to individual stages of ISMS solution
2. Consultancy related to individual measures of ISMS
3. Consultancy related to Act No 412/2005
4. Consultancy related to Act No 101/2000
5. Consultancy related to Act No 365/2000
6. Security roles, their responsibilities and powers