Certified security professionals at SPC Integrated Solutions continually enhance IT security to protect the confidentiality, integrity and availability of your information and meet changing regulations. With more than 40 years of IT security and auditing experience, our team holds all major certifications including MCSE, CISA, CISM and CISSP.

Comprehensive IT Audits

Through Gap Analysis, we review all information security program documents to identify missing or weak content. Analysis covers all security documents including:

• Security Policy
• Security Standards & Guidelines
• Security Procedures
• BCP

IT Policies, Procedures, Standards & Guidelines Audit

An IT Policies, Procedures, Standards & Guidelines Audit assesses the effectiveness of your institution’s information security programs to ensure the security and confidentiality of customer information, protect against potential security threats or hazards, guard against unauthorized access, and to ensure proper disposal of customer information. Document analysis includes:

• Annual Risk Assessment
• Security Policy
• Security standards, guidelines & procedures.
• Network problem tracking, resolution & escalation procedures.
• Network Topography Diagrams
• Security violation reports & management review procedures.
• List of vendors & customers with network access.
• Signed user security & awareness documents.
• Security-related training materials.

Business Continuation Plan

To maintain disaster recovery readiness, we assess your institution’s Business Continuation Plan (BCP) to manage and control identified risks and ensure that you have sufficient personnel and financial resources to implement it. We also ensure that:

• Employees are trained to understand their roles in BCP implementation.
• Your BCP is regularly tested.
• The BCP is continually updated to reflect the current operating environment.

Server Technical Audit

An SPC Integrated Solutions security assessment of your Windows™ server maintains the security and confidentiality of your customer information and protects against possible threats or security hazards. It also guards against unauthorized access. The Server Technical Audit tests the following:

• Server Configuration
• Access Control Lists
• User & Group Administration
• System Policy Settings

Vendor Contract Review

Integrated Solutions can review vendor contracts for hosted or managed IT services to determine vendors comply with your organization’s security policies and guidelines.

Meet Janet Wilth
Senior Systems Auditor
Certified Informat ion Systems Manager (CISM) and a Certified Information Systems Auditor (CISA)