Design of robust and fail-safe systems
based on client requirements
Sify Assure:Design comprises a structured suite of services that
employs state-of-the-art structured analysis techniques
to build robust and fail safe systems based on client explicit
and implicit requirements.
Security Policy, Standards
and Procedures Design: service enables organizations
to define and articulate the organizational information
security principles with clear roles and responsibilities
within the organizational construct under a common reference
model.
The service enables organizations to translate their business
security and regulatory security requirements into policy
mandates and distilling those mandates into implementation
procedures and standards to ensure effective practice of
security in organizational day to day activity.
The service is based on recognized industry best practices,
benchmarks, guidelines, and standards such as ISO 17799/
ISO 27001, ISO 13335, ISF, ITBPM, COBIT, SCORE and CIS benchmarks...
Secure Architecture Design
: service involves understanding the level of security
required by an organization to solve a specific business
issue and designing a security solution that meets the defined
requirements. The service provides a common basis for agreement
on design, development and implementation of the technical
and management aspects of Information Security by all suppliers
and users of information resources. The whole, or in part,
architecture designs are organizational risk-driven and
based on organizational information security policies and
technology infrastructure
Security Awareness Program
: It is designed to increase the level of awareness
within the organization to the point where security becomes
second nature and the process becomes a routine that all
employees can easily follow. It places special emphasis
on the human component of security without which even the
most sophisticated technologies will fail to protect an
organization against an ever - changing pattern of threat
Sify Assure’s combination of research, field experience,
and vendor neutrality provides instructions that are practical,
relevant, unbiased, and above all, useful. We help deliver
an effective and affordable awareness program by determining
the best delivery methods and focus areas. We work with
your organization to develop customized Security Awareness
training programs at all levels of the organization whether
management, engineering, administrative staff or general
users
Incident Response Planning
: service provides clients with tools, knowledge
and people necessary to develop an effective incident response
program. The service ensures that clients are capable of
detecting, assessing, responding, containing and recovering
from information security incidents that adversely impact
their information systems and networks .
The service will develop a structured plan for clients
comprising of the following: