Menu
We assist clients in becoming as secure as possible against outside attacks, and work to ensure that clients meet the latest regulatory requirements.
Cobaltix Compliance is a true one-stop-shop for compliance and infosec.
Risk assessments evaluate company’s risk to reputation, assets, people, privacy, integrity of systems, and data loss. We review general security and risk to IT as well as examine remediation and mitigation. Detailed systematic methodology and scoring systems are applied. Our remediation suggestions can be used as a first step in budgeting, scheduling, and understanding changes that should be addressed to improve the security infrastructure and environment of our clients. We also make sure clients are compliant with the latest regulatory requirements.
We perform vulnerability assessments on external networks, internal networks, and company websites to determine what vulnerabilities are present on computer networks, systems, hardware, and other components. This multi-step process is performed in an unobtrusive manner by an experienced security engineer. Our final report includes both a detailed technical breakdown for IT staff as well as a brief executive level summary with recommendations for remediation.
It is often the non-malicious, uninformed employee that can cause a threat to information security. Hackers take advantage of innocent employees using different threat techniques to make them a victim. When employees attend regular training and understand threat vectors, they are better equipped to stay ahead of bad actors. Cobaltix Compliance offers Cybersecurity Awareness Training onsite or via web conference.
Our customized awareness training empowers your team with up-to-date threat information and training. The classes are conducted live with a Cobaltix Compliance risk professional where we review habits that help to protect information assets. These courses are not a one size fits all offering, extensive planning goes into each course to ensure what is discussed and taught is pertinent to your organization.
We create and review policies and procedures focused on information security. Business Continuity, Disaster Recovery, and Incident Response are key elements. Policies and procedures, along with implementation, are incredibly important from a regulatory perspective. These documents are often reviewed by regulators during examination and audit. The SEC’s Examination Observations have highlighted a lack of thoroughly thought out plans. We use a hands-on, client-focused approach to create new policies from scratch as well as review existing policies, making sure they encompass the organization’s standards and meet the latest regulatory requirements.
As most companies now have a great deal of data in the cloud, security risks at third-party vendors’ are just as important as the organization’s. Regulators recognize these risks and continue to focus on this during examinations. The due diligence review process provides assurance that a vendor or potential vendor is stable and has both reputation and practices indicating that it is secure. It has been the case multiple times that when a vulnerability was discovered with a cloud provider’s website, our team worked with their technical team to provide detail on how to remediate the vulnerability. Our vendor due diligence process results in easy to review reports that meet regulatory requirements.
Review of vendor information security practices is not only key during the vetting and on boarding process but also throughout the client/vendor relationship. Cobaltix Compliance’s vendor due diligence process looks at how your data is secured, accessed, and stored, resulting in easy to review reports that meet regulatory requirements. We check for certifications, track record, reliability, and reputation. The due diligence review assures that a vendor or potential vendor is secure to enter a relationship with.
Cobaltix Compliance engages in penetration testing to give clients real world examples of the risks they face from criminals online. Our security engineers use industry standard tools and workflows, customized to each unique environment, to find exploitable vulnerabilities, privilege escalation and other risks. We will then provide your team detailed reports with findings and recommendations.
Not all organizations are large enough or have the budget for a security minded C-level officer. As your virtual Chief Information Security Officer (or CISO As A Service), we can advise senior management, decision makers and security & technology teams to safeguard information assets while supporting business operations with augmented infosec expertise to reduce business risk, signal commitment to data security and enhance overall security posture. Our vCISO can also act as the escalation point for all cybersecurity issues dictated in your incident response plan.
A Phishing campaign is an authorized simulated attack that tests staff’s awareness to electronic phishing email attacks. The simulation can help to educate users in how to spot malicious emails and can help you improve your company’s security awareness training.