Address
304 North Cardinal St.
Dorchester Center, MA 02124
Work Hours
Monday to Friday: 7AM - 7PM
Weekend: 10AM - 5PM
vSEC Auditing Services
Protecting information starts with having correct controls
Putting the correct controls in place such as; access and authentication controls; authorised and secure communication channels, is vitally important for businesses of all sizes and types. Making sure those controls function correctly and fully across the business is just as important, the controls are meaningless unless they are properly incorporated into operational processes and any manual checks are conducted with the correct regularity.
The vSEC audit service will independently review the controls, making sure they protect the full scope of the business, while also reviewing the processes around the controls and business data if any loopholes exist and recommending changes to eliminate them.
vSEC auditing services range from industry standards like ISO27001 and Cyber Essentials to audits tailored to your business needs.
Benefits of having the correct controls in place
How Does It Work
Regularly checking the controls are up to date and being applied is essential to driving these benefits. vSEC help lead this process, either by designing bespoke audits or using internationally recognised standards. We ensure that we have a good understanding of your business, what your goals are, who your key stakeholders are and what controls you already have in place. We identify the gaps and will make recommendations on what needs to happen to ensure those gaps are closed. We then help you build the solutions either by advising your organisation on how to approach the challenges or carry out the work ourselves if you require us to. Because of the nature of information security we ensure that any works are controlled and reported back to you in the format you require.
vSEC Audits Available Audits
vSEC Bespoke AuditsISO 27001Cyber EssentialsVulnerability Scans and Audits
Assessing the level of protect with either
- High level check of controls
- Complete security profile
Improve your ability to gain certification – saving time and effort by:
- Auditing your organisation against UK or international standards
- Identifying gaps to prepare for a full compliance audit
ber Essentials focuses on the basic areas:
- Organisation
- Business Operations
- Access Control
- Malware and Technical Intrusion
Vulnerability scan to audit your IT estate covering the following areas
- Website scan
- Browser scan
- End user device scan
- Mobile device scan
- Email system scan
- Network scan
- Certificate check
As part of any audit vSEC can ensure that you have the right controls in place and configured correctly
How Does A Audit Work
The audit process is simple starting with a scoping meeting to understand what you need to achieve followed by information gathering to understand your security profile – leading to an initial proposal which is shared, discussed and agreed. From there the engagement with the wider business starts as we:
- Meet stakeholders
- Review existing policies
- Understand what data you hold, where it is located and who has access
What Happens After The Audit
Once the audit is complete a report is created that identifies
- The organisations security profile
- Any gaps in your security
- Key risks
- Recommendations needed to improve your security profile
- How to build and execute a InfoSec plan
Why us
- Experience is successfully ensuring organisations pass Cyber Essentials and ISO 27001
- Successfully designed and delivered bespoke audits to ensure organisations are secure
- SC cleared staff
- 20+ years experience working in both public and private sector organisations
- Experience working in large and small consultancies