Improve

Service Description

We examine what organizations are doing to stay relevant and competitive in this fast-paced world, and which ones are doing it best. We then strategize using smart tools and global resources in order to understand the implications of every choice our clients can make. Get in touch to learn more about how this service can help you. - Governance, Risk & Compliance using security frameworks (ISO 27001 and 27002, ISM 2013, AESCSF, , PSPF, Cloud Security Alliance, VPDSS, DLM, NeAF, TOGAF 9.1, SABSA, NIST SP800, PCI-DSS) - Access Control, Data Security, Threat Management Security (McAfee CASB, Microsoft Office 365 ATP, Azure Information Protection, Rights Management, DLP Policies, Azure AD Single Sign-On, (Pass Hash, Through Sync), Azure AD Conditional Access Policies, ADFS (Federation with Office 365 – conditional access policies), Azure Monitoring and Log analytics, Azure OMS, AWS, Symantec CASB, Azure Application Infrastructure ) - Application & Web Layer Security • DevSecOps Framework and DevOps integration, cloud-first challenges management.: • DevSecOps Security: Tools – Alerta, CodeAI, Parasoft tool suite, Grafana, Kibana • Website DDoS Protection technologies: Incapsula, Radware • Web Security: Imperva WAF, HP Web Inspect, IBM WAF Websphere, Bluecoat proxy, OWASP, WASC, Big F5 LB • Application Security: IBM WAF Websphere, Imperva WAF, Secure Coding, Microfocus Fortify 360 Static Code Analyzer, Secure DevOps with automated DAST, N-circle, OpenSAMM, OWASP top 10, SANS/CWE top 25, WASC, F5 and Bluecoat • Interactive Application Security Testing (IAST)- HDIV, Netsparker, Veracode mPKI, Tripwire File Integrity Manager • AlgoSec Firewall Rule Analysis, RSA Archer eGRC • SIEM Platforms: NetIQ Sentinel Security Manager, HP Arcsight, Quest Software, Splunk SIEM Optimisation