Assessment & Advisory

Our knowledgeable consultants can help you meet and exceed your organization's IT needs.

Spyders’ Assessments & Advisory services have helped clients evaluate their risk exposure to a variety of information, internet and IT security threats, identify millions in annual network management savings, and demonstrate compliance with various North American regulatory requirements and internal compliance frameworks.

Threat Risk Assessments/Vulnerability Assessments
Threat Risk Assessments (TRA) vary in scope, methodology and the tools used to conduct the assessments. Spyders’ TRA’s vary to meet the needs of our clients. Whether clients require strict adherence to industry methodologies such as the RCMP HTRAM, a combination of passive non-intrusive testing and aggressive penetration testing of core systems, a full review of a SCADA network or social engineering and social media threat assessments, Spyders can and has done it all. Spyders maintains well documented TRA methodologies, paper-based audit documentation and leading vulnerability assessment and penetration testing tools such as, Nessus, Qualys, SAINT, Foundstone, etc. The key differentiator for Spyders’ are the strategic and tactical recommended remediation action plans provided to harden systems and minimize an organization’s risk exposure.

Network Optimization
Are you spending more on your network than you need to? Advances in technology continue to occur at a rapid rate bringing better and cheaper network technology and services to market. At the same time, competition in the provider market is growing fierce yielding rewarding cost savings for those able to identify and seize the opportunity. Spyders’ Proven Network Environmental Scan Methodology, executed by Spyders’ Subject Matter Experts has successfully, lowered Network infrastructure costs by 15% to 30% per annum, enhanced performance, functionality, service, security and technology, and positioned organizations’ foundational infrastructure to better meet business requirements. Implementation of Spyders’ Network Environmental Scan will simplify management of the network infrastructure through utility models, meaningful and measurable SLA metrics / targets, governance and clear accountability.

Security Optimization
Spyders’ Security Optimization Services (SOS) help organizations evaluate opportunities to better leverage the existing IT security investments to meet existing and planned business requirements. The SOS process also involves a review of planned security priorities and projects and provides recommendations and guidance on best fit technology, implementation considerations sample vendor requirements for RFP development.

Security Awareness
There are a number of factors that drive organizations to implement security awareness programs including compliance with laws and regulations, reducing unpredictable costs and maintaining a competitive advantage. Spyders assists organizations by developing security awareness programs that include the optimal communication strategy and plan, best suited training tools and employee performance support mechanisms to support and measure the success of the program.

Data Loss Risk Assessment
Do you know where your sensitive data is? Determining the level of risk data loss represents to your organization has never been easier. By employing Symantec’s™ leading Data Loss Prevention (DLP) solution, Spyders Risk Mitigation specialists can help you assess your data loss risk exposure in less than 30 days. The results of Spyders’ 30 day DLP Proof of Concept will give your organization the visibility into where sensitive data is exposed. Would you know if…

• confidential employee data was copied to a removable media device?
• Patients’ Protected Health Information (PHI) was stored on a Microsoft® SharePoint® site, in violation of compliance Security Rules?
• a department employee emailed pricing or merchandising plans to a competitor?
• exploration and production plans were emailed to a competitor or on a laptop that was stolen?
• client credit card numbers and information were stored on a lost or stolen laptop?
• an employee connected to a wireless network at the local coffeehouse was transmitting billing and claims statements containing patient PII off his laptop via Web mail?

Not knowing where your sensitive data is can put your organization at risk.

Compliance
Spyders helps you address and demonstrate compliance with most regulations and directives including Basel II, BS 7799/ISO 17799, Sarbanes-Oxley, Bill 198, PHIPA, PCI Data Security Standards, GLBA and others. Spyders’ team can assist organizations in attaining and sustaining information security requirements by helping them build strong network and information security capabilities in line with compliance requirements such as PCI DSS 2.0. See Spyders’ PCI DSS service offering, Attaining & Sustaining PCI Compliance.

BCP / DRP Assessment
Ensuring an organization’s BCP and DRP programs reflect the current business requirements, adequately prepare the organization for different disastrous events and ensure the investments in the programs are commensurate with the organization’s risk tolerance can be a challenge. Let us help you mitigate risk to your organization’s IT infrastructure, information security and business continuity and disaster recovery.