Service Overview
This service provides a flexible bank of senior security architect (Tier 2 support) consulting days, offering expert guidance and support as needed across a range of security domains.
Methodology
This engagement includes on-demand mitigation guidance and support from a senior security architect. The assistance can be applied to a variety of areas, including:
AWS / Azure review (red / blue team orientation)
GPO hardening
Network design review
SSDLC process evaluation and support
The scope and focus of the engagement are adapted according to the client’s specific security needs.
Deliverables
Deliverables depend on the nature of the engagement and the client’s needs. These may include:
Design documentation
Security consulting
Continued implementation support
Prerequisites
None explicitly required.
Customer Engagement
A designated point of contact from the client’s security team to manage and prioritize the requested activities.
Relevant Standards
Standards followed will depend on the technologies and domains addressed in the specific engagement.
Security Domains Covered
The following security domains will be addressed and revised, depending on the results of the assessment:
Cross organization policies, procedures and governance
Security operations, monitoring and incident response
Network level security
Servers, network equipment and endpoints security
Application-level security
Sensitive data and information management
Identity management and remote access