|
The Advanced Security Consultancy's aim is to support and advise our customers in translating business objectives and demands into security solutions (organizational and technical). This is what we call the 'what' side of our security management methodology. Before spending time and money on numerous risk and security management projects, we first investigate and determine what is important to your organization.
We make an assessment of your (corporate) environment, your organization, perform risk analysis on areas which seem to be of most concern to you, define Key Performance Indicators (KPI), measure them and, if possible, compare them with external references (market statistics). Our conclusion will be contained in an assessment paper. Recommendations will be implemented in a structured way. A security policy will be the basis for all security- and risk-related projects. For even more structure, we can extend this policy with security architecture for your organization. We use project management methods such as Prince 2 to make sure that we deliver what you expect within time and budget.
After delivering a more secure organization, we can remain on your site to train your people and continue measuring your safety. Our Business and Technical Consultancy offerings ('how') are explained in more detail in the figure below. Which offerings are of interest to your organization depends on the stage of your risk and security program. Our advice and support is applicable to various stages of a security program or project:
 
Our Business & Technical Consultancy products, instruments and services in one overview:
Identification of business drivers and their relationship with security
Quick scan security assessment
Security policy toolkit based on ISO 17799 & common criteria
Security Balanced Score Card for managing security programs
Security cost and benefit analyses
Security chain analyses
Risk and threat analyses
Our Business Consultants in combination with our Security Architects advise clients how to deal with potential threats and risks; develop effective measurements, systems and organization; and how to keep the balance between the technical, organizational, human and financial aspects.
Examples of professional services offered to our customers:
Security scans and certification
Security architectures
e-Identity & e-Passports architectures
Biomertic border control architectures
Physical access control architectures
Key management architectures
Risk analysis
and others.
|
