Telecommunication, Commercial & Education | Multi-national Corporation (MNC) and Institutes of Higher Learning (IHL)
Large Scale Assessment, Audit and Review

Our consultants have performed multiple complex large-scale assessments and developed assessment methodologies suiting our clients’ environment. These are repeated clients that engage our services for consecutive years.

PCI Industry | PCI Audit
Audit and Review, Assessment, Training

Our consultants have undergone global certification program recognized by Payment Card Industry (PCI) Security Standards. They have attained Qualified Security Assessor (PCI-QSA) and Qualified Payment Application Security Assessments (PCI – QPASA). PCI was founded by American Express, Discover Financial Services, JCB International, MasterCard Worldwide, and Visa Inc. Our consultants have experience in performing on-site PCI security assessment for numerous credit card service providers. Our consultants have helped these clients to enhance payment account data security by fostering broad adoption of the PCI Security Standards.

Government | Ministries, Statutory Board and Agencies, Institutions
Audit and Review, Assessment, Development, Training

Our consultants have performed numerous IT security assessments on many ministries and government agencies.

These services includes: System Security Audit & Review, Physical & Environmental Security Audit & Review, Policies Development & Review, Network Vulnerability Assessment and Penetration Testing, Web Application Penetration Testing, Wireless Security Assessment, Secure Architecture Review, Application Security Design Review and Security Training.

We have successfully advised these clients to attend to their weakest security link within their organization. We provided them with practical advices on risks prioritization, mitigations or remediations needed.

In one particular project, our consultants uncovered an unusual phenomenon. The environment was well protected by a vigilant operation team and had high standards of security practices. They applied patch process conscientiously and have conducted many audits. However, we uncovered some servers were still infected with many high-severity vulnerabilities. Our consultants were able to help the client investigate and nail down the root cause of this puzzling inconsistency. We made remedy advices. We helped in explaining to the management and gained their understanding of the problem, as well as the endorsement of necessary actions.

In some projects where tight security on fund transaction systems and databases were implemented, our consultant was able to pin-point flaws or oversights that may lead to possible access to these sensitive systems from internet. We have helped education institutions in uncovering and preventing attacks that may lead to exam results database alteration and deletion, leakage of test papers. We also conducted assessments on ERP and finance systems and prevented crucial information leakage to internal and external network. Our consultant has performed audit and review on government Lotus Notes system, and security assessment on Lotus Notes applications. Our consultant reported these security findings to Notes expert team and worked with them to provide adequate mitigation and recommendation to the client.