Cybersecurity assessment
A review of the security position for the systems and processes in scope.
Cybersecurity Consulting
Security guidance, assessments, and practical security improvement.
Cybersecurity consulting is guidance, review, and practical improvement for an agreed scope. It is not a claim that a system can be made completely secure.
Frameworks and duties such as ISO/IEC 27001, the NIST Cybersecurity Framework, CIS Controls, CERT-In requirements, Indian regulatory requirements, and client-specific requirements may be relevant. Whether any of them applies depends on the organization and the engagement scope. EFFIQRA does not present itself as certified, empanelled, or accredited.
What a consulting engagement can include
Security architecture review
A look at how the design handles access, data, and change.
Security policy consulting
Help writing or tightening the rules the organization wants people to follow.
Security gap assessment
A comparison of the current position with the requirements the client names.
Security hardening
Changes that reduce exposure on the systems that were agreed.
Compliance support
Help organizing evidence and controls for requirements that apply to that client. This is not a certification.
Risk assessment
A structured view of risks the organization asks to examine.
Security awareness
Material that helps staff recognize the issues relevant to their work.
Incident preparedness
A plan for who does what if something goes wrong, within the scope agreed.
Access control review
A review of who can reach which systems and data.
Network security review
A review of how the network in scope is segmented and reached.
Application security consulting
Advice on how an application should handle access, data, and change.
Discuss Your Requirement
Security work is scoped to the organization and the systems in the engagement.
Discuss Your Requirement