Security management | Socitm Consulting

Mailshot 2009-12-18 - Penetration testing can find more than you expected

Regular IT Health Checks and penetration testing are necessary to protect your network, website and individual devices against external and internal threats. Compliance and good governance aside, however, penetration testing can often come up with surprising results. Socitm Consulting's IT security partners, Encription Ltd, have been performing â?~top of the treeâ?T quality penetration testing for several years, and have uncovered some alarming cases.

Login or register to post comments | Tags: Information assurance, Transactional web and intranet, Security management

The Civil Contingencies Act and how to respond to it

The Civil Contingencies Act 2004 is intended to deliver “a single framework for civil protection in the United Kingdom capable of meeting the challenges of the twenty-first century”.

Publication date:

05/2006

Audit of PC disposal procedures

Client name:

Southend-on-Sea Borough Council

Southend-on-Sea Borough Council now has a comprehensive strategy for securing information and securely disposing of ICT hardware in an environmentally sustainable way following a review by Socitm Consulting. With our expertise in integrating information and hardware lifecycle management, we were able to assist the Council in ensuring both data and equipment are managed securely and ethically across the organisation.

ICT security policy review

Client name:

Salisbury District Council

Salisbury District Council has strategically integrated and improved organisation-wide understanding of ICT security following an independent review by Socitm Consulting. The review supported the Council in establishing a corporate ICT security policy in line with its ICT strategy and in promoting ICT security procedures across the organisation in accordance with current standards and best practice.

Information security gap analysis

Client name:

Calderdale MBC

Following a review by Socitm Consulting Calderdale Metropolitan Borough Council has a new strategy for improving information security to best practice standards across the organisation and an action plan for its implementation.

Information security & legislation compliance management review

Client name:

Birmingham City Council

The project issues
When the Data Protection Act 1984 was introduced Birmingham City Council (BCC) set up a corporate function in Central IT to fulfil statutory requirements. A network of contacts in departments who fulfilled a local data protection role assisted this. Typically this was an adjunct to their ‘proper’ job. This remained the case in 2003 despite the increase in legislation in the meantime.