Security System Evaluation
Cyber security isn’t only about IT. It’s about expanding beyond organisational walls and the IT environment into operations and products. You need to keep a step ahead of adversaries by building resilience into your environment and becoming secure to the core so you can focus on your business.
Governance, Risk, & Compliance
Governance, risk and compliance (GRC) refers to a strategy for managing an organisation’s overall governance, enterprise risk management and compliance with regulations. Think of GRC as a structured approach to aligning IT with business objectives, while effectively managing risk and meeting compliance requirements.
GDPR Compliance
CTSS will work closely with you through your GDPR audit to find out exactly what your current compliance status looks like. Based on the gap analysis findings you’ll receive a customised implementation plan, meaning you only pay for the services that your business needs.
PCI DSS Compliance
PCI DSS applies to all organisations, such as merchants and service providers, that store, process and transmit cardholder data (CHD) and/or sensitive authentication data (SAD).
Cardholder data includes: Primary Account Number, Cardholder Name, expiration date and service code.
Sensitive authentication data includes full track data (magnetic stripe data or equivalent on a chip) and CAV, CVC, CVV and CID numbers, PINS and PIN blocks.
ISO27001 Certification Methodology
- Gap Assessment and Scope Definition
- Pre-Audit Assessment
- Risk Assessment
- ISMS Framework Development
- ISO 27001 Certification Support
- Training and Implementation Support