Share:
Risks
Synetis, with its agile and operational approach, is able to support SMEs and large companies from the definition, to the implementation and control of Cybersecurity.
Our approach is pragmatic, brings a 360° vision of your security, allows budget optimization by focusing on your major risks, and is a possible starting point for a roadmap.
Risk mapping and analysis
Challenges: Identify sensitive data and processes with regard to impacts, build attack scenarios and assess the company's risks.
Sample approach:
- Analysis of the context and framing of the analysis
- Formalization of the methodology and construction of reference systems (EBIOS 2010, EBIOS RM, methodology based on ISO 27005, etc.)
- Conducting business and IT interviews
- Formalization and assessment of risks
Integration of security in projects
Challenges: Build, tool and industrialize the consideration of security issues and risks in the context of daily projects.
Sample approach:
- Analysis of the life cycle and the project process
- Construction of the ISP process
- Design of risk catalog and safety measures
- Construction of the tooling (Excel or software packages)
- Team training and awareness
Remediation and risk treatment plan
Issues: Identify risk reduction actions and projects in relation to issues, risk criticality, priorities and available resources.
Sample approach:
- Study of risk treatment options (options based on the ISO 27005 standard)
- Identification of action plans and safety work sites
- Estimation of costs, resources and associated expenses
- Prioritization of work sites
- Arbitration and formalization of a continuous safety improvement plan
Support for the implementation of the PSI
Challenges: Support project, IT and security teams in identifying, analyzing and dealing with security risks in the context of projects.
Sample approach:
- Qualification of new projects and evolution projects
- Security needs assessment
- Compliance and security analysis
- Identification and analysis of application risks
- Formalization of recommendations
You might be interested in these articles:
