About Us  

 Why we are here: The technology industry has changed and evolved in recent years to become the foundation supporting an organization's most valuable asset, its information resource.   Organizations' proprietary information on products, services, customers, competition and employees is critical to maintaining efficient daily operations in today's  competitive marketplace.   

The internet explosion, 911 and the e-business revolution have elevated the importance of information security throughout all areas of our society.  New regulations such as:  HIPAA, Sarbanes-Oxley, Gramm-Leach Bliley, FERPA and The Patriot Act require compliancy and certification.  These newly established standards are requiring significant changes to the way information technology is performed on a daily basis.

Few organizations have the manpower in-house to execute a well-planned information security strategy that enables all systems to meet newly established industry and legal requirements.  Seldom is information security addressed to the level of detail required to ensure an effective security posture for an organization.  When efforts are deployed for information security, they are usually random, not comprehensive and not performed in a common and consistent manner.  This chaotic environment leaves organizations vulnerable to viruses, hackers, terrorists and corporate espionage.  The Related Topics section provides additional information on why information security is a necessity for every organization.

 What we provide:  As the new information security industry evolves, few firms provide information security assessments based on a standard, proven methodology.  A consistent methodology is required to ensure all aspects of an information system’s vulnerability have been reviewed.  Any one area not assessed provides an entry-way for attack and negates the value of the entire assessment.

The National Security Agency (NSA) has created an Information Assurance Methodology (IAM) to meet the demand for improved information security.  This IAM is becoming the standard method for assessing and securing information systems' environment.  The Institute of Information Securities methodology and its ISA Express product line are based on this recognized, established standard.  

Why you need us:  Not all organizations are fortunate enough to have in-house, the required staff with the level of expertise necessary to implement and maintain an effective information security posture.   Therefore supplemental, objective, third party expertise is required to ensure adequate resources are applied to protect an organization’s information assets. 

Organizations with more substantial in-house expertise will also benefit from an outside perspective that will validate existing policies and procedures.  An independent review will also provide insight into supplementary policies and procedures that are being effectively utilized by other organizations.   Information security is not a static process and improvements can always be implemented.