« Assess information system security weaknesses, identify and execute appropriate action »

---------------------------------------------------------------------------------------------------------

Information system are usually vital to companies activities. Ensure their protection thus becomes a priority.

Hence le cercle GASPAR offers a risks analysis specially dedicated to information system.

---------------------------------------------------------------------------------------------------------

This methodology os conducted by specialized consultants and consists of 5 steps :

ETAPE 1 : Définition of security needs
• Discussion with CEO and information system Director
• Analysis of technical infrastructure

ETAPE 2 : Evaluation of IT risks
• Risks identification
• Risks appraisal
• Identification of further required technical analysis to be conducted

ETAPE 3 : Coordination of technical studies
• Example: antivirus tests, intrusion prevention…

ETAPE 4 : Action plan
• Proposal of an action plan (organizational steps, technical changes and training sessions)

ETAPE 5 : Validation
• Action plan validation
• Proposal of a balance scorecard and follow up tools