Security Documentation
In todays, Cyber world, it is important for organisation to demonstrate a workable security governance program and having the right set off documentation is the first step. It also helps organisations to build a strong governance framework under which they can operate and demonstrate compliance against different standards. At Tindya, we have the expertise to build this framework and to meet your objectives around documentation requirements
- Information Security Charters
- Risk Management plans
- Developing security policies and procedures
- Developing System and Site Security plans
- Producing Statement of Applicability (SoA)
- Information classification, labelling and Handling;
- Incident Response plan
- Vulnerability and Patch management documentation
- Business Continuity plans
- Secure Software Development Life Cycle
Security and Compliance
We can assist your organisation with gap assessment and readiness against the global and local security standards
- ISO27001:2013
- ISO9001:2018
- ISO27001:2017
- ISO27001::2018
- ISO14001
- PCI DSS 4.0
- SOC
- Information Security Manual (ISM) and Protective Security Policy Framework (PSPF)
- Australian Cyber Security Centre (ACSC) Essential 8
- NewZealand Information Security Manual and Protective Security Requirements
- NZ Critical Controls
- Digital Transformation Agency – Hosting Certification Framework (HCF)
- Australian Department of Home Affairs (DoH) – Critical Bill and mandatory reporting
- New South Wales Government Top 25 mandatory requirements
Security Assessment
It is important that security assessments are performed to ensure security objectives around confidentiality, integrity and availability are met.
- Vulnerability and Pentesting
- Application Pentesting
- Mobile Application pentesting
- Risk Assessments
- Business Inspect Assessment
- Security & Network Architecture assessment
- Physical and Personnel security assessment e.g. compliance with Australian Government Protective Security Policy Framework (PSPF)
- Cloud Security and risk Assessments
- Supply Chain risk assessment
- Vendor Assessment Program
Training
We all know that human is the weakest link in the organisation, it is now become important more than ever to train our internal staff, contractors and vendors on security and the risks associated while working in thee organsiation.
- Security Awareness Training
- Training on Australian Government Security
- Training on NewZealand Government Security
- Secure coding
- Offensive Security
Miscellaneous
It is important that access to information is granted to personnel on a need-to-know and need-to-go basis. At Tindya, we have a good understanding of Australian and New Zealand personnel security protocols and guidelines and can assist agencies in getting the security clearances as per the requirement.
- National Police Check
- Australian Government Security Vetting Agency (AGSVA)
- Working with Children Check
