Domains
What is a security audit? Like penetration testing, a security audit can help uncover system vulnerabilities. A security audit checks the degree of compliance of customer information system with a set of defined security policies, rules, procedures and standards. According to current trends in information security, there are three distinct types of security diagnostics:
Strictly speaking, security audits are used to measure an information system's performance by using a list of criteria. On the other hand, vulnerability assessment involves a comprehensive study of the entire information system. The goal is to find potential security weaknesses. Penetration testing is a covert operation, in which a security expert tries a number of different attacks to ascertain whether or not a system could withstand a real malicious attack.
Security auditing can include technical studies such as penetration testing which, apart from administrative and physical security measures, checks technical security systems. The security audit service is primarily intended for customers who have built a system for managing information security and wants to check its actual value.
Have you already try to describe some of your product, process, service or something else to colleagues and customers?
But you can’t and can’t. No matter how hard you try, reduce it, add something, edit it, consult with the experienced persons, it is not the "right thing". Simply: It is not clear enough.
Oh, there are such situations and information, and one of the solutions is visualization.
Example: http://spvp.zesoi.fer.hr/seminari/2001/rs-232.swf
Visualizations are supplementation or completely replacing the textual information with drawings, photos, animation or video recordings in order to better clarify what we mean and to facilitate the adoption of information or knowledge.
When you have accumulated enough information about the state of the user's system, the needs of the available technologies and products, it is necessary to evaluate the feasibility of intent and methods for achieve it.
By crating feasibility study, Nobium gives its customers basic information about the parameters so they can decide whether to even embark on a new project and how to decide among possible options. Nobium will make explicitly recommendation on user’s request.
A typical feasibility study should include
- options - what are the ways for solving the task,
- criteria - how to compare the alternatives (options)
- evaluation - assessment (scoring) of each of the options and clearly highlight the advantages and disadvantages of each,
- proposal - the main choice and alternatives, and why.
Security level of some system designed according to:
- ultimate purpose/purposes of systems,
- environment in which it operates,
- degrees of risks to which it is exposed,
- regulations that apply to it.
Nobium for its clients design systems, procedures and measures of protection that raise the level of safety of existing and future systems in line with client's needs and local and international standards and regulations.