The first step towards securing its data is the knowledge of its information system, weaknesses, vulnerabilities, threats around it and risks to these shortcomings.
Knowledge of the Information System inevitably involves an audit of all or part of it, by means of:
- Organizational audit
- Process auditing
- Compliance audit (to Security Policy and/or to regulation)
- Technical audit of infrastructures (servers, networks, etc.)
- Technical audits of applications (source code audits, web, mobile and API penetration tests, etc.).
- Employee maturity audit
Brightway is PASSI qualified (Information Systems Security Audit Provider) by the French Cybersecurity National Agency on 4 scopes:
- Organizational and physical audit
- Architecture Audit
- Configuration Audit
- Penetration testing
BRIGHTWAY RECOMMENDS
In addition to your expertise, BRIGHTWAY recommends that you discover:
