SMEs Go Digital Pre-Approved Cyber Security Solutions

Security Configuration Review

• Reviews the configuration settings of operating systems, databases, devices etc against cyber security hardening industry benchmarks;
• Ensure that systems are hardened to the best within your business needs to prevent vulnerabilities from being exploited;
• Assure your customers that their user accounts are unlikely to be breached by attackers and their personal data in the applications are kept secure.

Web Application Grey-Box Penetration Testing (Limited Scope)

• A lightweight service as compared to a full-scope penetration test, a faster turnaround period;
• Tests the login mechanism and session management of the web application; 
• Ensure that the first line of defence of the web application will not be easily compromised by malicious attackers; 
• Assure your customers that their user accounts are unlikely to be breached by attackers and their personal data in the application can be kept secure.

Web Application Grey-Box Penetration Testing (Full Scope)

• Includes all the assessments in the limited scope and also test cases based on OWASP and MITRE which are not covered in the limited scope;
• Covers test cases from OWASP Top 10 2013-2017, injection based attacks as well as privilege escalation;
• Assurance to customers that the web application is not affected by the common vulnerabilities that web applications are commonly subjected to;
• Your customers can feel confident that their Personal Identifiable Information (PII) will be handled securely while using the web application.

Endpoint Black-Box Penetration Testing

• Targets the vulnerabilities of an endpoint from an attacker’s point of view;
• The objective is to mimic real-life hacking scenarios an attacker uses to gain access to the endpoint from an outside in approach;
• Assure your customers that the endpoint is unlikely to be subjected to an external attack.

Click here for more details.

Security Architecture Review (Small System)

• Security Architecture Review focuses on the architecture of the IT system (<6 hosts); 
• Asset details and system architectural information are consolidated and high-level system vulnerabilities potentially exploitable by hackers can be identified; 
• The outcome of this exercise feeds into other deliverables in this advisory service. 

Security Architecture Review with Threat & Risk Assessment (TRA) (Small System)

• Security Architecture Review focuses on the architecture of the IT system (<6 hosts); 
• Asset details and system architectural information are consolidated and high-level system vulnerabilities potentially exploitable by hackers can be identified; 
• A threat and risk assessment is a systematic process of identifying various threats and vulnerabilities to the IT system, based on the likelihood and impact of potential cyber attacks;
• Business processes change over time and the cyber security landscape is constantly evolving, hence there is a need to perform regular risk assessments and keep the risk register updated. 

Security Architecture Review with TRA and Control Review

• Security Architecture Review focuses on the architecture of the IT system (<16 hosts); 
• Asset details and system architectural information are consolidated and high-level system vulnerabilities potentially exploitable by hackers can be identified; 
• The outcome of this exercise feeds into other deliverables in this assessment service. 

Security Architecture Review with TRA (Large System)

• Security Architecture Review focuses on the architecture of the IT system (<16 Hosts); 
• Asset details and system architectural information are consolidated and high-level system vulnerabilities potentially exploitable by hackers can be identified; 
• A threat and risk assessment is a systematic process of identifying various threats and vulnerabilities to the IT system, based on the likelihood and impact of potential cyber attacks;
• Business processes change over time and the cyber security landscape is constantly evolving, hence there is a need to perform regular risk assessments and keep the risk register updated.

Click here for more details.