Security advisory

Through our Security Advisory practice, we ensure our organisations manage their information assets securely and are fully protected.

Through our Security Advisory practice, we ensure our organisations manage their information assets securely and are fully protected by planning and implementing appropriate business continuity and disaster recovery strategies and ensuring sound governance and compliance with appropriate legislation and regulatory drivers.

Key areas of our Security Advisory expertise include:

  • Risk management: We help you to understand the risks your organisation faces, the regulatory requirements placed upon it surrounding IT, information security and corporate governance, and the implications of non-compliance.
  • Information security management: We help you to develop and implement effective and appropriate policies, procedures and working arrangements to manage your information security using international standards for information security management such as ISO 27001 (formerly BS7799) as a benchmark.
  • PCI DSS Compliance: As a Payment Card Industry Qualified Security Assessor (QSA) and Approved Scanning Vendor (ASV), we are ideally placed to advise on PCI DSS. We have developed a one-stop shop PCI DSS solution to help organisations become and stay compliant.
  • Business continuity and disaster recovery: We provide comprehensive business continuity and disaster recovery planning services to ensure that your organisation has arrangements in place to protect you from risks such as flood, fire, fraud and the loss of key personnel and suppliers, using the BS25999 standard as a benchmark.
  • Service management: We work with you to benchmark your existing IT service support and delivery processes against standards such as ISO 20000 (formerly known as BS15000) based on the respected ITIL (IT Infrastructure Library) framework and recommend where and how improvements can be implemented.
  • CESG Listed Advisor Scheme: Our CLAS consultants are approved by CESG to provide Information Assurance advice to Government Departments and those of critical national infrastructures.