Your IT GRC program must address more than just the physical network. It should be designed to protect the entirety of your IT infrastructure and processes against both technical and human vulnerabilities. This means a security assessment should extend well beyond conventional network vulnerability scanning. cprlorca offers the kind of comprehensive security assessment that can identify vulnerabilities and determine the adequacy of your existing security controls and best practices.
If your organization is subject to IT security mandates such as FDIC, GLBA, HIPAA, HITECH, NCUA, OCC, and PCI DSS, you are required to have independent third-party testing of your information security program to identify vulnerabilities that could result in unauthorized disclosure, misuse, alteration, or destruction of confidential information, including Non-Public Personal Information (NPPI). The recommended best practices methodology is a security assessment that incorporates testing of both technical and human vulnerabilities related to your information security program.
Our security assessments are designed specifically to meet regulatory requirements and address the needs of any size organization. To determine the adequacy of your existing security controls and to identify security deficiencies, our seasoned security experts will conduct a thorough examination of your IT infrastructure. The assessment includes manual false positive reduction services and vulnerability analysis to determine severity, and a best-practice review.
The assessment process is managed through the company’s cloud-based software solution, TraceCSO, allowing you convenient access to a variety of tools that can be used to continuously assess the three core components of your information security program – people, processes, and technology.
A security assessment that is conducted remotely includes:
A Comprehensive Security Assessment (CSA) includes these additional services:
When conducted onsite, the CSA also includes:
CSA results are provided in an extensive report containing:
On-going CSA services, via TraceCSO, include:
cprlorca also offers custom security assessment options tailored to your organization's needs and budget, including a security assessment that is performed remotely.