Virtual Cyber Consultant (VCC)

We will support the organisation to create and adapt to cybersecurity framework based on ISO 27001. We will evaluate the current posture, provide recommendations for improvement, Create relevant policies and processes. Develop a Risk assessment methodology and assist in conducting Risk assessment. We will also provide you with templates and records to be maintained to ensure alignment to the framework.

Services include:

• Gap Assessment
• Create Cyber Policies
• Create Governance Policies
• Review Cyber Procedures
• Compliance activity trackers
• RA Methodology
• Risk Assessment
• Effectiveness Measurement
• Risk Monitoring/Review of Risk Treatment Plan
• Audit Report Response/Corrective Action Plan
• Management Review Meeting - Create
  Continual improvement plans

We can review and comment on your ISMS framework and maintenance practices. We will review the relevant policies, processes, procedures and records.

Services include:

• Review of Cyber Policies & Processes (Documentation set)
• Review of Cyber Procedures
• Gap Assessment (Request & review of evidences to ensure compliance to policies & processes)
• ISO 27001 maintenance/framework review (Training, Risk monitoring & treatment plans, Management review meeting records, Internal audits, etc.)

We will support the organisation to create and adapt to cybersecurity framework to comply to all Cyber Essentials requirements. We will evaluate the current level of compliance, provide recommendations for improvement, create relevant policies and processes. We will also provide you with templates and records to be maintained to ensure compliance to the requirements.

Services include:

• Gap Assessment/Review of compliance to Cyber Essentials requirements
• Create Cyber Policies & Processes
• Create Governance Policies
• Review Cyber Procedures
• Documentation of Cyber Essentials
• Self-assessment Questionnaire

We can review and comment on your compliance to Cyber essentials requirements. We will review the relevant policies, processes, procedure, and records.

Services include:

• Gap Assessment/Review of compliance to Cyber Essentials requirements
• Review Cyber Policies & Processes
• Review Cyber Procedures
• Review of documentation & Cyber
  Essentials Self-assessment Questionnaire

We will support the organisation to create and adapt to the business continuity framework based on ISO 22301. We will conduct BIA (Business Impact Analysis) to identify critical assets and relevant acceptable unavailability periods, and create relevant policies and processes. We will help the organisation develop a Risk Assessment methodology and assist in conducting Risk Assessment. Based on the outputs of the assessment, we will support in creating Business Continuity plans and Disaster Recovery plans. We will also provide you with templates and records to be maintained to ensure alignment to the framework.

Services include:

• Conduct Business Impact Analysis
• Create Business Continuity Strategy
• Create Business Continuity-related policies and processes
• Risk Management Methodology
• Risk Assessment
• Business Continuity Plans
• Incident Response Plans (subject to scope & requirements)
• Playbooks (subject to scope & requirements)
• Disaster Recovery Plans (subject to scope & requirements)

We can review and comment on your Business Continuity & Disaster Recovery Plans and maintenance practices. We will review the relevant policies, processes, procedures and records.

Services include:

• Review of Business Impact Analysis
• Review Business Continuity Strategy
• Review Business Continuity-related policies and processes
• Review Risk Methodology & Assessment
• Review Business Continuity Plans
• Review Incident Response Plans
• Review DR Plans
• Review Playbooks
• Review DR testing records

We will support the organisation to create Incident Response plans based on industry-accepted frameworks NIST SP 800-61 and SANS. We will assess the current practices in place and suggest recommendations for improvement. We will create Incident Response-related documents including Policy, roles & responsibilities, Processes, and Incident Response Plans. We'll also create playbooks to support timely and effective cyber incident response.

Services include: 

• Create Incident Management Policy
• Create Incident Management-related documents - Roles & responsibilities, communication plans, etc.
• Create Incident Management processes
• Create Incident Response Plan
• Create IR Playbooks

We can review and comment on your Incident Response Plans and practices against industry-accepted frameworks NIST/SANS. We will review the relevant policies, processes, procedures and records.

Services include:

• Review Incident Management Policy
• Review Incident Management Processes
• Review Incident Response Plans
• Review Playbooks

We will support the organisation to create and adapt to the cyber risk management framework based on ISO 31000/NIST SP-800. We will identify critical assets/processes, develop a Risk Assessment methodology and assist in conducting Risk Assessment. We will also provide you with templates and records to be maintained to ensure alignment to the framework.

Services include:

• Create Information Asset Registers
• Risk Assessment Methodology
• Risk Assessment
• Risk Treatment Plan
• Risk Monitoring/Review of Risk Treatment Plan
• Management Review Meeting - Create

We can review and comment on your Risk Management Framework and implementation. We will review the relevant methodology, assessment report and relevant records.

Services include:

• Review of Information Asset Registers
• Review of Risk Assessment Methodology
• Review of Risk Assessment Records
• Review of Risk Treatment Plan & Risk Monitoring Process

We will create, review and evaluate your organisational cybersecurity controls for your supply chain management processes. We'll connect with you to understand the areas/services with supplier involvement, data shared, IT controls implemented and high-level guidelines, if any in accordance with the same.

Services include: 

• Review supply chain processes & practices (agreements, data sharing practices, cyber security controls, etc.)
• Identify applicable cyber controls
• Create supply chain standard (as per the identified cyber controls that need to be implemented)
• Create supply chain policy

We can review and comment on your supply chain management processes and its implementation. We would connect with you to understand the areas/services with supplier involvement, data shared, IT controls implemented and high-level guidelines in accordance to the same. We will review the relevant policy, standard and relevant records.

Services include: 

• Review of Supply Chain practices
• Review of Supply Chain policy & standard
• Review of Supplier monitoring records

We will help you create Information Asset registers, classify assets and develop cybersecurity integrated processes to manage your asset lifecycle. We will address all types of assets - Hardware, Non-IT, Software, Paper, Staff/People, Electronic, etc.

Services include:

• Review of Asset handling processes
• Create Information Asset Registers
• Assist in Asset Classification & Criticality
• Asset Management Policy and Standard

We can review and comment on your Asset Management processes, Information Asset registers, Asset Classification and overall Asset Management Lifecycle.

Services include: 

• Review Asset handling processes
• Review Information Asset registers
• Review Asset Management policy and standard