Information Security Consultancy Services
We provide security consultancy to central and local government, and to commercial organisations, and can offer reference sites upon request. All our consultants are Government Security Cleared. Our range of services include:
- Penetration Tests & Vulnerability Assessments
- ISO 27001 and ISO 17799 Services
- e-Government Strategy Framework Policies
- Business Continuity Management / Disaster Recovery
- Security Reviews / Gap Analyses
- Security Documentation Services
- Risk Management Services
- Security Training and Awareness
Please read on for further information on the services we provide, Contact Us with your questions or Click Here for detail about our work experiences.
Penetration Tests & Vulnerability Assessments - Boldon James offers 2 services – the IT Network Health Check Service and the Application Health Check Service, both of which include Internal and External Assessments. We have developed a proven systematic methodology which identifies vulnerabilities in networks and applications as efficiently as possible and therefore at a minimum cost to you.
ISO27001 and ISO17788 services - Boldon James provides expertise in the ISO 27001 and ISO 17799 security standards to organisations that require assistance with compliance and certification. We help organisations fully understand these standards, focussing on mandatory requirements and enabling comprehension of what it takes to achieve ISO 27001 compliance and / or certification. ISO 27001 is the only world-wide standard for measuring information security effectiveness. It has been adopted by many different organisations including central government, the National Health Service, local authorities, the police and criminal justice community and is used throughout the commercial world.
e-Government Strategy Framework Policies - Boldon James provides expertise in e-Government security services. We help organisations ensure that their services are secure, complementing other business requirements i.e. fully functional, quick and easy to use services. We assimilate security threats to e-Government services such as malicious electronic attacks, unauthorised access, technical hardware failures, denial of service, human errors and breaches of legislation, regulations and contracts, and help organisations adopt a pragmatic approach to managing risk to information and IT security. We keep abreast of HMG’s e-Government Strategy Framework Policy and Guidelines, in particular the framework policies that address information and IT security requirements, starting with the Security Framework Policy and Guidelines. Our experience is complemented by our extensive expertise in the ISO 27001 and ISO 17799 standards, HMG Manual of Protective Security and HMG Infosec Standards.
Business Continuity Management / Disaster Recovery - Effective Business Continuity Management (BCM) and robust disaster recovery processes ensures that organisations can continue to operate to agreed, minimum acceptable levels based on a business impact assessment, in the event of a risk to continuity being realised. We take a pragmatic risk-based approach to the processes. In conducting Business Impact Assessments, defining requirements and establishing strategy, Boldon James follows a well-defined methodology.
Security Reviews / Gap Analyses - We apply our information and IT security knowledge and expertise to verify the appropriateness of selected and implemented security policies and procedures, and technical measures. We also identify and analyse significant security gaps in the security management processes and security measures implemented that equate to unmanaged risk and may lead to unwanted business impacts resulting from compromises of confidentiality, integrity and availability.
Security Documentation Services - We provides expertise in creating, updating and reviewing information and IT security policies, standards, procedures and guidelines. We believe that the most important issue to address is the successful implementation and organisation-wide understanding of security policy, standards, procedures and guidelines, and this is hugely influenced by the style and content of the documentation. It is therefore important to address this issue throughout the documentation development life cycle.
Risk Management Services - Boldon James provides expertise in risk assessment and risk management. We help organisations identify, analyse and evaluate risks to their information and IT assets. In addition, we assist organisations with the selection of cost effective countermeasures to mitigate unmanaged risk.
Security Training and Awareness - We provide expert services in information security training and awareness. We help organisations with differing information security requirements, including ISO 27001 (BS 7799), risk management and security awareness programmes. We offer standardised training courses, but also provide organisations with the opportunity to undertake customised training courses based upon their specific requirements. This may entail application of the course materials to a defined area of an organisation’s business.
Further Information
Please Contact Us with your questions or Click Here for information about our work experiences.
