Threat audit and resource inventory analysis
The audit includes an assessment of the Office's preparedness to identify and minimize risks, creating a risk register and plans for their reduction.
We analyze technical and organizational possibilities of inventorying ICT resources, with an emphasis on the automation of change notifications and versioning.
We also check the system for managing permissions to these resources to ensure their security and control.
Audit of elements with a significant impact on security
The audit covers key elements affecting the security of the Unit, focusing on areas such as:
- quality and scope of employee training,
- security of remote work,
- data processing on mobile devices,
- IT support contracts, backup management,
- and technical and organizational methods of securing information.