Assessment: The First Step to Stronger Security.
Before you can comply with security regulations such as the Gramm-Leach-Bliley Act (GLBA) or the PCI Data Security Standard (PCI-DSS), you need to perform a thorough security risk assessment to determine your current security capabilities. We help you do this by first helping to define the criteria you must meet to make wise risk-related decisions. Once that is done, we perform the following three steps:
- Review for vulnerabilities. We identify potential vulnerabilities in your infrastructure that could possibly be exploited. We do this using advanced perimeter, internal, and external scanning methodologies.
- Identify risks. We then document the potential risk to your organization should those vulnerabilities be exploited.
- Mitigate risks. Finally, we identify strategies for mitigating the identified risks. We can also deploy those mitigation strategies if you desire.
Two Types of Assessments.
Savvis offers two types of assessments. Whether you need to harden your overall security posture or prepare for a particular regulatory or certification review, we can help you get there.
General Security Assessments. Because security touches every aspect of your business’ IT environment, we can perform an assessment of everything from the network to operating systems, databases, applications, business continuity mechanisms, and process management.
Compliance Assessment Services. We can also conduct a broad range of gap analyses to help determine your preparedness for meeting regulatory and industry criteria such as PCI-DSS, Common Criteria, HIPAA, GLBA, Children’s Online Privacy Protection Act (COPPA), and Control Objectives for Information and Related Technology (COBIT).
Security Health Check Assessment Brochure