SECURITY POLICIES, PROCEDURES AND STANDARDS SERVICES
Security policy, procedures and standards form an essential part of every organization, irrespective of its size and industry vertical. Defining these policies makes employees aware about their roles and responsibilities towards creating a safe and secure IT environment.
Javin provides a wide range of services around policies, procedures and standards to fulfill an organization’s inimitable and definite needs. The team at Javin have years of experience building Policy, Procedures and Standards for local Australian companies as well international companies across various sectors like financial, legal, manufacturing, utilities, e-commerce, ASX 100 and startups.
PCI-DSS POLICIES AND PROCEDURES
The task of creating policies, procedures and standards to attain PCI-DSS compliance is far from a trivial exercise. In order to achieve PCI-DSS compliance, PCI-DSS council has very strict guidelines and specific requirements. It is tedious, operationally challenging and extremely costly exercise – both in pure dollars and manpower costs. Our experience with PCI-DSS helps organizations successfully meet the documentation requirements of the PCI-DSS compliance in a speedy and cost effective manner.
SOE STANDARD
Standard Operating Environment (SOE) should follow a set of common guidelines to ensure uniformity and security for all IT infrastructure including but not limited to firewalls, desktops, laptops, web and database servers etc. We help with the assessment of SOE environments and create a SOE hardening guideline as per benchmarks like CIS and NIST. Our approach is based on years of experience and follows security best practices. We create SOE for physical as well as virtual environments, Microsoft operating systems (servers & workstations), web/database servers, network devices, security appliances and Amazon/Azure cloud.
ISO-27001:2013 POLICIES AND PROCEDURES
Achieving an ISO 27001:2013 compliance requires creating a lot of policies and procedure with very detailed documentation and strict adherence to ISO 27001 standard guidelines. Due to the involved and meticulous documentation requirements, a lot of times Organisations fail the Level 1 ISO audit which is the very first step to attain ISO-27001:2013 certification. ISO 27001 is also often used by Organisations as a guiding principle to create their own ISMS (Information Security Management system). Javin expertise helps an organisation to fulfill both, the needs of an ISO compliance as well as design of specific ISMS programs for the organisation wide security initiatives.
BUSINESS CONTINUITY PLAN
The business continuity planning (BCP) is the creation of a strategy in recognition of the threats and risks facing an organization, with an eye to ensure that personnel and assets are protected and able to function in the event of any disaster. Javin helps organizations in the creation and review of BCP policy and plans in light of various standards like ISO 27001:2013, The Australian Government Information Security Manual (ISM) and NIST. We also ensure that any organizational business specific needs are also addressed in the BCP policy and planning.
IT RISK ASSESSMENT AND MANAGEMENT
Risk assessment is not meant to only be a compliance tick box for organizations. Visibility to the risks associated with critical assets and overall IT is one of the best investments that an organisation can make. All strategic road maps as well organisational budget allocation must follow a risk based approach to allocate budget and resources towards the most prevalent risks to the business.
Risk assessment also forms essential part of almost all the compliance initiatives be it ISO 27001, PCI-DSS, NIST guidelines, COBIT, ASX-100 guidelines making risk assessment and management an activity which every organisation should do irrespective of its size and the sector.
Javin helps organisations to get most value out of IT risk assessments. We provide risk visibility around the most critical assets, associated current controls and existing gaps. Once identified we provide risk treatment plans to mitigate those risks. We can create an appropriate risk management framework utilizing standards such as ISO 27001 and PCI-DSS audits, COBIT, ASX 100 and Australian government ISM guidelines and to match the industry specific needs and business appetite.
