Our information security advisors help you protect your critical operations, allowing you to focus on managing your business — not your technology. Our services include:

• IT risk assessment
• Information systems controls review
• Network and application security review
• Internal and external network security, penetration and application security testing
• SOX IT consulting
• Assist with your SAS 70 Readiness and preparation for Audit
• Assist in remediation of deficiencies from your SAS 70 Audit
• PCI data security review
• We offer internal and external vulnerability testing, penetration testing and on-site security reviews.

Security Services

Depending on your financial and risk requirements, we offer these security measures as a package or individually.

During our overall network security assessment, we often conduct internal and external vulnerability testing and penetration testing, as well as:

• Assess current IS control policies and procedures
• Conduct in-depth evaluation of manual and automated IT controls compared against industry best practices
• Assess vulnerabilities or exposures to your e-commerce or Internet-based initiatives
• Review your facility, including physical security and environmental controls
• Interview IS management and departmental end users
• Review your Business Continuity and Disaster Recovery plans used in the event of unexpected system failures

Addressing Regulatory Issues

Our approach helps you manage the technical in support of the regulatory:

• Complying with internal controls regulations such as Sarbanes-Oxley
• First time adoption of IFRS
• Implementing IFRS and an enterprise risk management system to prepare for a public listing or during post-merger-integration
• Complying with industry specific regulations such as Basel in the financial sector
• Coping with breaches of rules and regulations
• Seeking maximized convergence efforts and cost savings while complying with regulations.

Addressing IT Governance Issues

• Managing risk at the enterprise level
• Seeking efficiency and effectiveness of IT infrastructure
• Achieving value from the risks and control framework – both process and applications
• Preventing, detecting and investigating fraud
• Helping to limit exposure to Intellectual Property threats.
• Aiming at driving cost optimization by making strategic changes to the business model
• Aiming at optimizing efficiency in systems and controls within finance, procurement, the IT function, treasury and HR
• Increasing capacity for high performance through technology, the supply chain and through sourcing and shared services.
• How to manage key stakeholder relations, integrity and accuracy in communications.
• How to implement appropriate board and sub-committee structure and policy, such as its composition and mandate, in order to help ensure the integrity of key officials and appointments.
• How to develop an appropriate focus for corporate citizenship, such as policies on sustainability. How to identify what corporate citizenship information should be reported, how to gather such information and procedures to help ensure the accuracy of information.
• Rapid cost reduction, effective cash management, turnaround planning and implementation, financial restructuring, exit planning.