Security and Confidentiality

The e-business sector has grown tremendously over the past few years. Why? Process automation and the almost systematic use of information technology (IT) to drive business.
Given this situation, organizations are facing challenges related to:

• the management and protection of information assets (infrastructures, systems, data)
• the security, control and protection of personal information

Our comprehensive approach to security architecture considers the company's business vision along with its technologies and technical concerns. Furthermore, besides complying with our security approach, our consultants rely on recognized standards and best practices:

• COBIT control objectives
• ISO standards governing risk and security management

Our services

• Development of a security management framework, policies and guidelines
• Risk analysis (Méhari and other methods)
• Technology and application security architecture
• Definition and implementation of security measures, processes, practices, management indicators and security functions such as:
• identity and access management (LDAP directories, authentication infrastructures, etc.)
• journaling
• public key infrastructure, particularly e-signature integrated into applications
• biometrics
• encryption solutions for sensitive data
• virus and spyware protection
• intrusion detection
• Audits—personal information security, control or protection—and verification of systems, infrastructures or IT processes
• Testing of technology infrastructure vulnerability, intrusion or robustness
• Business continuity and disaster recovery