Information Security Governance, Risk Management, and Compliance (GRC)
Information Security Governance, Risk Management, and Compliance determine the overall strategy an organization has regarding its Information Security. Cal Net can create a roadmap which allows organizations to increase their security posture through technical controls, risk management, policies and procedures.
Cal Net has a long list of services related to GRC. Among them are as follows:
- Risk Assessments
- Assessing the Risk of systems and/or processes around Information. This can also be applied to the assessment of risk for new projects, such as assessing the risk of adding functionality to an intranet or adding servers with sensitive information to a network.
- Security Architecture Review and Creation
- Gap Analysis around existing security architecture and/or creation of a secure architecture. An example of this would be architecting a DMZ where Internet-facing servers reside.
- PCI-DSS Preparation and Remediation
- Guidance around PCI-DSS compliance for organizations that deal with payment cards and cardholder data. This includes remediation following a PCI audit.
- Mobile Security
- Strategy and implementation of controls around mobile devices such as Tablets and Smartphones
- Disaster Recovery/Business Continuity Planning
- DR/BCP plan creation and review.
- Data Classification
- Finding and classifying information, normally the first step in implementing Data Leakage Protection.
- Incident Response
- Response to security incidents such as virus infections and data leakage, including forensic analysis of exploitation.
- Security Awareness & Education
- Education for personnel around existing or newly created policies and procedures as well as Best Practices around approaching security.
- Security Control Implementation
- Implementation of security devices such as DLP, Intrusion Prevention (IPS/IDS), Application Whitelisting, Web Application Firewalls (WAF) and Endpoint Protection.
- Log Analysis
- Analysis of logs from devices to determine if exploitation attempts are being made on the target network and/or determine anomalies.
Contact us now at:
Anaheim:
714-630-5753
Downtown Los Angeles:
213-483-2638
Hollywood & East L.A.:
323-257-2638
Irvine:
949-450-2638
Long Beach:
562-633-2638
Ontario:
951-788-2638
Pasadena east to Covina:
626-304-9884
SF Valley / Burbank / Glendale:
818-701-5753
Ventura County:
805-520-2638
West L.A. / South Bay:
310-782-2638
Anaheim:
714-630-5753
Downtown Los Angeles:
213-483-2638
Hollywood & East L.A.:
323-257-2638
Irvine:
949-450-2638
Long Beach:
562-633-2638
Ontario:
951-788-2638
Pasadena east to Covina:
626-304-9884
SF Valley / Burbank / Glendale:
818-701-5753
Ventura County:
805-520-2638
West L.A. / South Bay:
310-782-2638

