Welcome To Persoft Online

_________________

Offerings
_________________

Promotions
_________________

Events
_________________

In the News!
_________________

We Are Your Corporate Technology Resource Partner

Home

Corporate Info

Subsidiaries

Careers

Home > Offerings > Information Security Management > Security

Services Offer > Security Audit Level 1

Approach

This service allows you to experience how and why security reviews are required in their organization. It allows you to understand the state of security in their IT environment to allow you to consider the next step of actions to be taken to remedy the problem area. This service reviews critical technical, process and people controls in the customers’ IT environment.

Technical Control Reviews

This is a set of reviews to determine the adequacy and performance of technical security controls in your organization. Our security consultants will test for possible ways for an intruder to access your servers, from the internal and external network.

This review covers 2 major areas, the operating system and the network. More details of the audit are as follows:

Operating System Audit

Evaluates the strength of operating system security and access controls

Network Audit

Evaluates the strength of network security policies with Internal and External Penetration Tests

Process and People Control Reviews

This is a set of reviews to evaluate the effectiveness of the information security management processes based on ISO/IEC 27001:2005 Information Security Management Systems (ISMS) and Microsoft Security Assessment Methodology.

ISMS Gap Analysis

	Physical & Environmental Security
	Reviews the Secure Area which houses critical information processing equipments.

	Operations Management
	Reviews the controls for operating system configurations changes, capacity planning, time synchronization, malicious software controls, and backup & recovery.

	Patch Management Process
	Reviews the timeliness and effectiveness of patch implementations.

Microsoft Security Assessment

A Risk Assessment designed by Microsoft to provide information and recommendations about best practices for security. This Risk Assessment is based on accepted standards and best practices for helping reduce risk in IT environments. It uses the "Defense-in-Depth" concept, which refers to the implementation of layered defenses that include technical, organizational, and operational controls. The assessment covers four Areas of Analysis: controls. The assessment covers four Areas of Analysis:

	Infrastructure
	Applications
	Operations
	People

	Our Group of Companies



	Persoft Corp Sdn Bhd
	Persoft System Sdn Bhd
	Persoft Services Sdn Bhd
	Persoft Properties Sdn Bhd
	Xanadu Solutions Sdn Bhd
	Designel Media Sdn Bhd
	MyCampus Sdn Bhd

	More information

	Our Company Profile



	Download Persoft Group Company Profile 2010 in Adobe PDF Format. Click here to download