Security Risk Assessment

Due to the continue change of security landscape, regular assessment is important for every company. From our experience in working with entities in different business sectors, we have developed our own security risk assessment methodology to evaluate the risk and propose recommendation to mediate the risk identified.

1. System architecture review

Security shall be the DNA in every system design. No matter it is on-prem or cloud based solution, our expertise will assist you in evaluating the security issue through the system design journey.

2. Vulnerability scanning and penetration testing

Security hole cannot be fixed until it was identified. Periodic vulnerability scanning and penetration testing help you to identify the loophole such that you can apply appropriate control to mitigate the risk before attackers exploited it.

Security Audit

Our team offers can help you identify the weakness in the systems by conducting security audit with reference to world well recognized or local government standard. Deficiency from standard will be highlight and suggestion will be made after the caused was analysed.

Privacy Impact Assessment

Users often curious to know how their personal data being handle, process, retain and erase in the system they are using. Our specialist help to analyse the privacy data flow in business process and information system with reference to the Personal Data (Privacy) Ordinance (Cap. 486) and other well recognized regulation, such that risk can be identified and mitigated.

Security Awareness Training

No matter how secure the system was designed and how many security controls has in-place for a system, those can still be compromised if it was used inappropriately. Security awareness play a vital role in every system. User from senior management to clerical position will know their role and responsibility with our on-site classroom based training which tailor-made based on your company needs.