Muftasoft TM

User Tools

Site Tools

Trace:
atrc_website:security_compliance_services

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
atrc_website:security_compliance_services [2023/01/20 18:05] – wikiadminatrc_website:security_compliance_services [2023/09/21 11:09] (current) – wikiadmin
Line 3: Line 3:
  
 **Review, Consultancy and Compliance services for the following standards.** **Review, Consultancy and Compliance services for the following standards.**
 +
 +Compliance to : PCI DSS
 +
 +Compliance to : UL 2900
  
 Compliance to : NIST Compliance to : NIST
Line 9: Line 13:
  
 Compliance to : ISO 17799 Compliance to : ISO 17799
 +
 +Compliance to : FIPS 140 
  
 Compliance to : ISO 27002 Compliance to : ISO 27002
Line 15: Line 21:
  
 ISO/IEC 15408 Common Criteria ISO/IEC 15408 Common Criteria
 +
 +Compliance to : {{ :atrc_website:standard_100-4_e_pdf.pdf |BSI Standard 100-4}} covers Business Continuity Management (BCM).
 +
 +Compliance to : {{ :atrc_website:bsi-standard-2001_en_pdf.pdf |BSI Standard 200-1}} defines general requirements for an information security management system (ISMS). It is compatible with ISO 27001 and considers recommendations of other ISO standards such as ISO 27002.
 +
 +Compliance to : {{ :atrc_website:bsi-standard-2002_en_pdf.pdf |BSI Standard 200-2}} forms the basis of BSI's methodology for establishing a sound information security management system (ISMS). It establishes three procedures for implementing IT baseline protection.
 +
 +Compliance to : {{ :atrc_website:bsi-standard-2003_en_pdf.pdf |BSI Standard 200-3}} bundles all risk-related steps in the implementation of IT baseline protection.
  
 IEC 62443 : This cybersecurity standard defines processes, techniques and requirements for Industrial Automation and Control Systems (IACS) IEC 62443 : This cybersecurity standard defines processes, techniques and requirements for Industrial Automation and Control Systems (IACS)
Line 29: Line 43:
  
 Compliance to : NERC. The most common is NERC 1300, which is a modification/update of NERC 1200. The newest version of NERC 1300 is called CIP-002-3 through CIP-009-3 (CIP=Critical Infrastructure Protection). These standards are used to secure bulk electric systems although NERC has created standards within other areas.  Compliance to : NERC. The most common is NERC 1300, which is a modification/update of NERC 1200. The newest version of NERC 1300 is called CIP-002-3 through CIP-009-3 (CIP=Critical Infrastructure Protection). These standards are used to secure bulk electric systems although NERC has created standards within other areas. 
 +
 +**Compliance to national standards :**
 +
 +Malaysia 
 +
 +[[countries:malaysia:cyber_security|Malaysia Cyber Security Policies]]
 +
 +
 +Singapore 
 +
 +[[countries:singapore:financial_and_cybersecurity_policies|Singapore financial and cybersecurity policies.]]
 +
 +Australia 
 +
 +Essential Eight
 +
 +The Australian Cyber Security Centre has developed prioritised mitigation strategies, in the form of the Strategies to Mitigate Cyber Security Incidents, to help organisations protect themselves against various cyber threats. The most effective of these mitigation strategies are called the Essential Eight.
 +
 +Germany 
 +
 +The Federal Office for Information Security (German: Bundesamt für Sicherheit in der Informationstechnik, abbreviated as BSI) standards are an elementary component of the IT baseline protection (German: IT-Grundschutz) methodology. 
 +
 +
 +
 +
 +
 +
 +United Kingdom 
 +
 +UK Cyber Essentials 
 +
 +Cyber Essentials is a United Kingdom government information assurance scheme that is operated by the National Cyber Security Centre (NCSC). It encourages organizations to adopt good practice in information security. Cyber Essentials also includes an assurance framework and a simple set of security controls to protect information from threats coming from the internet. 
  
 Certifications of our consultants :  Certifications of our consultants : 
Line 67: Line 113:
  
 Suggested methods and actions to take to fix the loophole. Suggested methods and actions to take to fix the loophole.
 +
 +[[atrc_website:contact|Contact Information]]
  
  
  
atrc_website/security_compliance_services.1674219905.txt.gz · Last modified: 2023/01/20 18:05 by wikiadmin