|
Chief
Security Officers
As we enter into the 21st century, the NEW order of
business deals with 'security' and 'information
assurance’, and how they are addressed in terms of
validating and safeguarding data, information,
infrastructure, people and property.
ATIBA provides industry wide accepted best-practices
that protect your organization and assures others of
your ability to secure and protect private information,
as well instilling confidence in your ability to
bounce-back when unexpected disasters occur. Through the
use and exercise of standard operating procedures and
emergency contingency planning, your organization can
thrive, regardless of the situation that presents
itself.
ATIBA's CSO Services Include:
- Disaster Recovery Planning
- Business Continuity Planning
- IT Contingency Planning
- Enterprise Security & Policy Services
- Risk & Compliance Assessment
- CISO Augmentation Support
- CPO Augmentation Support
- IT Audit Support
- Policies, Standards and Procedures
- Network Vulnerability Assessment
- Application Vulnerability Assessment
- Security Awareness and Training
- Security Architecture Assessment
CSO / Information Assurance
Practice
CERTIFICATION &
Compliance Support
In addition to the offerings of the CSO On-Demand
program, ATIBA
offers a suite of deliverables geared at CERTIFYING and
assuring that the integrity and security of data and
processes meet regulatory oversight mandates.
ATIBA uses ISO 17799, the
de facto standard for Information Technology Security
Techniques & Management, as the underlying
framework/methodology to support and govern required and
voluntary security and privacy compliance initiatives,
including mandated compliances such as GLBA, SOX AND
HIPAA. |
CSO/CPO/CISO
ON-DEMAND
Chief Security
Officers
The CSO is the executive responsible for the organization’s
entire corporate security posture, both physical and
digital. The CSO oversees and coordinates security efforts
across the enterprise, including information technology,
human resources, communications, legal, and facilities
management. The CSO is also responsible for identifying
security initiatives and standards. CSO’s typically own, or
participate closely in initiatives such as business
continuity planning, loss prevention, fraud prevention, and
privacy.
The new buzz in technology today is focused around
'security', and the procedures that are in place to secure
and protect people, data, systems, facilities, assets and
property - all of which tie closely to government mandates
such as HIPAA, SOX and GLB. Security planning also ties
closely to business continuity planning - the plan that
provides security to your shareholders, employees, and
customers. Your business continuity plan helps to ensure
that your organization has the ability to continue to
function and stay in business during or after a catastrophe
or disaster.
A key responsibility of a CSO is to help determine the areas
of weakness within an organization and to correct those
weaknesses, which if compromised, can impact the ability of
the company to continue essential functions and
mission-critical services.
In that today’s world is data-centric and information
driven, the ultimate role and challenge of the CSO is to
anticipate disaster scenarios - they must create
check-points and redundancies to maintain and safeguard
systems and facilities, and they must develop processes and
security measures that protect people, data, and both client
and corporate assets and property.
In the 1990s the government, as a means of demanding
corporate accountability, passed Acts such as HIPAA,
Sarbanes Oxley and GLB, that require organizations to
undergo annual compliance audits to help to ensure that such
safeguards are in place.
Putting such procedures and processes in place require
specific knowledge and expertise, and many smaller
organizations seek out that CSO expertise on a 'part-time,
contract, or on-demand basis', since employing these
resources full-time would be cost-prohibitive.
It should also be noted that since 9/11, many organizations,
especially international organizations and government
institutions, will not conduct business or trade information
with other organizations that cannot prove voluntary or
mandated compliance to generally accepted security
guidelines and principles such as ISO 17799 or SAS70, both
of which can also be used to support SOX and GLB compliance.
Through ATIBA'S comprehensive CSO On-Demand or CSO Managed
Services programs, we can provide peace of mind to any
company seeking security certification or compliance,
seeking to secure their IT infrastructure and information,
or seeking to develop a solid business continuity plan that
will help guarantee their ability to continue operations
during or after a breach or disaster. |
