COMPLIANCE AND AUDIT
A systematic evaluation of an organization’s cybersecurity policies, procedures and their effectiveness. A cybersecurity audit focuses on security standards, guidelines and procedures and the implementation of the related controls.
TECHNICAL CONTROL TESTING
Technical controls include deterrent, preventative, detective, or compensating controls implemented via technology and are designed to ensure business objectives are met. They include IT general controls (ITGC), such as change management, System Development Life Cycle (SDLC), logical access, disaster recovery, physical security, and IT application controls, such as authentication, completeness checks, and input controls.
These controls are important to ensuring that your organization’s systems are secure, accurate, and reliable, and, therefore, also ensuring the confidentiality, integrity, and availability of data, along with the overall management of your IT function.
Mature technical controls help lower costs and risks within your organization. Several frameworks are available, which The Mako Group has extensive experience working with, that will allow your organization to mature its processes, COBIT, ISO, NIST, ITIL, etc. In addition, having mature technical controls will assist with compliance with regulations, such as MAR, SOX, HIPAA, etc.
