Services

Security and Identity Management

Information “Cyber” Security

Through building security-architected networks, applications and business practices, interruptions from security incidents, risk of privacy breaches, and potential losses due to information leaks can all be managed. Additional business benefits will include:

For many industries and government sectors, compliance with mandated security standards and guidelines (e.g., ISO 27001/27002 and derived government standards, Commonwealth Information Security Manual aka ACSI33)
A risk-managed balance between operational flexibility & efficiency and procedures and policies that appropriately safeguard critical information in line with the organisation’s specific approach to information governance and risk management
Improved awareness of the risks and consequences associated with information security breaches
Greater visibility of the effectiveness of the organisation’s information security stance driven through operational metrics, programmes of compliance measurement and continuous improvement
Achieve reduced risk to the organisation’s reputation through minimized opportunity for high-profile security breaches

SMS will undertake the following activities to assist and enable Information Security:

Organisational security assessment
Support to certification under ISO27001, ISM, etc
Security Incident Response Planning
Application security review (development)
Application security review (enterprise architecture)
Security threat risk assessment
Security testing (including penetration testing, risk-based testing)
Network security design and information flow auditing
Managed information security services

Identity Management

Through centralising and rationalising the management of user credentials – passwords, tokens, biometrics, and other forms of digital identities – organisations achieve access controls which are streamlined, easier to use and more efficient to maintain. Additional business benefits will include:

Compliance with security standards and guidelines mandated for identity systems underlying public infrastructure,
By centralising and streamlining identity management (e.g., Single Sign On), organisations will remove complexity across your network. Enabling greater scalability for future growth.
Reduce bottlenecks and accelerate help desk processes by enabling employees to more proactively manage their own credentials.

SMS will undertake the following activities to assist and enable Identity Management:

Identity Management System platform implementation or review
Public Key Infrastructure (PKI) implementation or review
Identity Governance
Federated Identity implementation
Enterprise Authentication