G.R.C

The cornerstone of any information security strategy is a robust set of policies, procedures, standards and guidelines. Are your organization security policy & procedures accurate? Correct? Updated? Relevant? Efficient?  Don’t have a security policy and/or procedures at all ? ...

ISO/IEC 27001 is a worldwide standard which gives a unified framework for managing information security. This standard which was published in October 2005 by the ISO/IEC (International Organization for Standardization /International Electrotechnical Commission) is a set of requirements for the establishment, implementation, monitoring and review, maintenance and improvement of an ISMS (Information Security Management System).

The IT-RiskIndex system developed by Avnet grades the level of risks to which the organization is exposed, starting from the single system level and the inner risks embedded in it, through all of the organizational systems, processes and technology, to the level of the entire organization.

Most organizations possess Databases containing personal information about individuals. The law of privacy regulates issues like formal registration of databases, type of information which may be collected, classification of information, how this information should be used including third party contractors, information retrieval and maintenance e.g..

Banking and Insurance which constitute the largest percentage of the finance sector pie are officially supervised by government institutions (by most western countries) in purpose to regulate certain activities and processes including special reference to Information Technologies management, Risk Assessment, Information Security, Backup and Recovery, Outsourcing, Web services, Controls e.g..