IMPLEMENTATION OF ISO 27001
We provide the approach to ensure the compliance of information security standard and the readiness the certification of ISO 27001 standard in the company.
Service :
– The design, implementation and assurance of controls over manual and IT process based information security standard
– Identify the planning and performance measurement frameworks of information security management system
– Process review (evaluation) and improvement
– Develop System documentation (policy & procedure)
– Coaching, Supervision, and training related document and IT security control
IMPLEMENTATION OF ISO 20000-1
We provide the approach to ensure the compliance of information technology service management standard and the readiness the certification of ISO 20000-1 standard in the company.
Service :
The design, implementation and assurance of controls over manual and IT process based IT service standard –
Identify the planning and performance measurement frameworks of IT service management system –
Process review (evaluation) and improvement –
Develop System documentation (policy & procedure) –
Coaching, Supervision, and training related document and IT service management control –
RISK MANAGEMENT
We help you identify and prioritize the significant risks so that informed choices can be made as to the most appropriate means to mitigate risk to an acceptable level.
Service :
– Facilitated risk workshops and consultation with key stakeholders
– Risk identification, prioritizations, monitoring and reporting
– Development of risk mitigation strategies
– Review of the effectiveness of internal control
– Identification of appropriate controls
IT AUDIT / ASSESSMENT
We provide the approach to ensure the compliance of information technology service management standard and the readiness the certification of ISO 20000-1 standard in the company.
Service :
Review existing control to assess effectiveness against standards; business risks and rules on corporate governance –
Development of risk based audit programs –
Prevention and detection of non conformity –
Advising on corrective action for recommendation of improvement –
Provide Audit reporting to client –
BUSINESS CONTINUITY MANAGEMENT (ISO 22301)
We help you manage the significant risks related disaster occurred so that business can be continued as planning to mitigate business risk to an acceptable level.
Service :
– Identified business risk and Facilitated workshops with key stakeholders to set the tolerance of disruption level
– Develop the framework of BCM and procedures for continuity process
– Prioritizations business recovery based on criticality of business by assess the business impact analysis
– Development of risk mitigation strategies to recovery of business
– Identification and review of the effectiveness of BCM control
– Planning for simulation and testing
IT DOCUMENT DEVELOPMENT
We provide a process to complete the requirement IT documents needed to ensure the running of IT process systematically
Service :
Planning for identification of IT Document Development –
Analyze and control related IT security and control and implementation –
Development of IT policy and procedure –
Facilitate workshop to finalize the documents with related stakeholder –
Ensuring the Technology Standard Compliance –
VULNERABILITY ASSESSMENT / PENTEST
We provide a valuable resource to evaluate system and infrastructure and also give assurance concerning their system improvement.
Service :
– Analyze existing IT proses of system and related infrastructure
– Identify Risk, prioritizations, and evaluation the impact to system
– Conduct assessment or testing according required methodology (white box, grey box, black box)
– Review of the effectiveness of control
– Reporting and recommendation for correction
IMPLEMENT OTHER SYSTEM MANAGEMENT
We provide a process to evaluate the processes other system management
Service :
We conduct consultancy in other various standards such as: ISO 9001, ISO 14001, ISO 45001, ISO 50001 –
