Ransomware STOP audit

Information is one of the most important resources of modern organizations. Information, as a tool for management and control, is used in all organizations, which is why the majority of organizations are specialized in processing information. The majority of information is processed using IT tools, whether in services, production management, accounting, or sales. There are currently numerous threats affecting these IT tools and the processes they manage. Some are manageable; however, others can only be survived with well-planned and predefined protective measures. The purpose of our Ransomware STOP service is to assess and strengthen the protective capabilities of the organization’s processes and IT system.

Identifying protective capabilities
The targeted assessment takes the form of an audit, aimed at providing objective information about the current protective capabilities and use processes of the IT infrastructure that can be used to determine any possible inherent risk factors and any shortcomings in security or management.

Targeted audit
This service is not about IT situation assessment in its traditional sense, but rather specifically targets the protective capabilities against Ransomware threats.

• Exposure of IT systems
  • Assessment of operation processes
  • Mapping security and vulnerability risks
  • Handling updates
  • Assessment of network management
• Back-ups and the related control
• Assessment of information security control and operation
• Assessment of security consciousness
  • Internet use
  • Mail
  • Connection of external devices
  • Assessment of the use of portable equipment (mobile phones, tablets, notebooks)
  • Handling unknown sources
• Assessment of BCM capabilities

Methodology
The audit relies primarily on the ISO 27000 family of standards and NIST/OWASP guidelines, and we examine the protective capabilities of our clients accordingly.

Project products
After completing the audit, the Client receives a report that provides details of the problems and shortcomings identified. In addition to current risks, faults, and shortcomings, the report also includes our proposed solutions for managing these problems, in the form of a detailed schedule.

• The priority, criticality, and the recommended order of the proposed measures.
• The tasks to be performed and the measures to be implemented.
• The estimated time for each task and a schedule for the implementation and introduction of the recommended measures.
• The estimated cost of the proposed measures and solutions.