Information security

Who it is for

• Companies holding sensitive client data
• IT and security leaders
• Companies entering international contracts
• Financial and telecoms sectors

When it is needed

• Clients or partners require compliance with international standards.
• A leak has occurred — or there is reason to believe one has.
• Access rights have accumulated for years and nobody knows who holds what.
• You need an independent view of what the in-house IT function has delivered.

Risks it addresses

• Leaks of client and commercial data
• Excessive access rights
• Social engineering against staff
• Failing counterparty requirements

What it includes

• Information security audit against international practice
• Information security and cybersecurity consulting
• Preparation for ISO/IEC 27001 certification
• Assessment of staff resilience to social engineering

How it runs

1. We establish what is actually being protected: which data is critical for this business.
2. We look at how access, processes and incident response are arranged.
3. We test conformity with the standard and with what counterparties expect.
4. We deliver a prioritised plan: what to close first, what can wait.

The result

A report listing non-conformities, how critical each one is, and a remediation plan ordered by real risk rather than by ease of implementation.

Boundaries and confidentiality

Delivered together with specialists from the Qalqan information security sector and partner firms. Penetration testing is performed only with the written authorisation of the system owner.