CONSULTING: COMPLIANCE IN INFORMATION SECURITY
In comparison to the IT-audit, which aims for a target/performance comparison, the future or necessary target state is defined in consulting. This defined target state can enable customers to carry out an IT audit in the future and identify corresponding deviations.
An example of a consulting activity is the development of binding security policies (mandatory instructions), procedures (defined procedures) and guidelines (non-binding recommendations for action). Support in defining the „state of the art“ for an area of application, e.g. cryptography, also falls within the scope of classic security consulting.
Security consulting also includes the implementation of security awareness programs and the training of employees.
Broad range of consulting services
SEC4YOU offers information security consulting in the following areas, among others:
YOUR ADVANTAGES
- Resource-saving external consulting
- Personnel support for existing teams
- Competence in all project phases
- High level of experience with complex ISO 27001 issues
- Optimal cooperation with the certification company due to many years of experience as IT auditor
