Security.Studio

Information security as an art Our services: - Conducting regulatory and technical information security audits - Development of an information security development strategy from the SMB level to the Enterprise level according to the standards: CIS Control, ISO 27001, NIST 800.53, Cloud Security. - Creation of a risk management process for information security of CIS RAM from the SMB level to Enterprise - Preparation for external audit of PCIDSS 3.1 and 4.0 - Building secure development processes according to the OWASP SAMM 2.0 methodology - Development of a threat model for information systems - Scanning the external perimeter and searching for vulnerabilities - Audit configuration standards of your information systems (CIS Benchmark) and cloud service providers (GCP, AWS, AZURE) - Conducting an automated audit for vulnerabilities and configuration errors in the version control system (GitHub, Gitlab, BitBucket, Azure Repos), container registries (Docker Hub, GCR, ECR, ACR, GitHub Container Registry, DigitalOcean, GitLab Container Registry, Google Artifactory Registry) , Continuous Integration (Terraform Cloud), Platform as a Service (Cloud Foundry, Heroku, IBM Cloud, Pivotal Web Services), Serverless (AWS Lambda, Azure Functions) - Organization and implementation of Security Awareness - Search and selection of personnel in the field of IT / IT