Gap Analysis
Integralis' Gap Analysis services help you pinpoint the vulnerabilities and risks that currently exist within your systems, applications, policies, procedures, information security defenses and IT infrastructure.
We offer a comprehensive approach that provides a complete view of existing security and compliance gaps including review, analysis and documentation of your:
- Compliance status in terms of regulatory mandates and industry standards
- Existing risk mitigation and security practices, policies and procedures
- Current network operations including network infrastructure, connected devices, and network and wireless connections
- Security defenses including firewalls, intrusion detection and prevention systems (IDS/IPS), and security software
- Application vulnerabilities including web applications
Our methodology gives you a thorough understanding of your current security gaps and prioritized recommendations for their remediation and mitigation including:
- Clearly defined scope that covers every part of your operations
- Review of relevant documents that describe your current practices including privacy policies, security procedures, and hardware and software documentation
- Physical inventory of your systems. Integralis' experts use the latest software tools to audit the devices and software currently on your network, and to identify any unauthorized connections or devices
- Personal interviews with relevant employees to uncover how your procedures, policies, and processes are implemented and used day-to-day
- Review and analysis of your systems for optimized implementation of security measures including identification of problem areas such as misconfigurations
- Review and comparison of your current security practices and tools against relevant mandates and standards