Information Security
“More and more organizations are viewing information as one of their key corporate assets. Today, information is king, and protecting that information is synonymous with protecting the business”. – David Yach, Chief Technology Officer, Research in Motion
3Si Risk Strategies team members understand that information security is more than a technology issue. It includes the securing or safeguarding of all sensitive information and information systems, electronic or otherwise, which are held by an organization.
Information security requirements are driven by one or more of three overarching business considerations:
- operational requirements;
- regulatory requirements; and
- fiduciary requirements.
3Si information security programs and services broadly examine the various types of information assets within an organization and the management practices that directly and indirectly impact information and information security. 3Si evaluates how information itself is managed and assesses results against day-to-day business requirements to ensure that business objectives are realized, that information assets are adequately protected and that operational business requirements for information (i.e. , information flow both within and outside the organization) are supported by management-approved information security measures.
The experienced 3Si team of information security specialists (a combined 47 years of information security experience) can assist the client in achieving information security results on time and on budget. Professional training and designations include CISSP, Payment Card Industry QSA, and CPP to ensure that a broad range of information security expertise is available to assist the client with a security solution.
Information security programs and services include:
- Information and information systems Threat Risk Assessments and remediation
- Classification of Information strategies
- Information Security Program development and Security Governance strategies
- Information Security Policy and Procedures development
- Information Security Incident Response and Investigation
- Compliance Audits
- Disaster Recovery and Business Continuity solutions
- Physical and logical Access Control solutions
- Process Control security
- Integrated Security Operations strategies