Services

Information System Security (ISS)

Information systems security is a broad subject within the field of Information Technology (IT) that focuses on protecting computers, networks, and their users. Modern companies, as well as many families and individuals, have justified concerns about digital risks to their well-being.  The main goals of information systems security are confidentially, integrity, and availability. IBIGA has over 12 years of experience as Information System Security Officer (ISSO) roles for various federal government agencies.

————————————————————————————

Cloud Security (CS)

Cloud security is the protection of data, applications, and infrastructures involved in cloud computing. As with other computing environments, cloud security includes maintaining adequate preventative protections so you know that the data and systems are safe. Cloud security covers the protection of data stored online via cloud computing platforms from theft, leakage, and deletion. Methods of providing cloud security include firewalls, penetration testing, vulnerability protection, and data protection.

————————————————————————————

IT Security Audit and Risk Assessment

IT security audits are an systematic evaluation of the security of a company's information system by measuring how well it conforms to a set of established criteria. Security audits measure an information system's performance against a list of criteria/control to make sure it is operating in an acceptable risk to the organization.  Helping to protect against a data threat event, security audits involve technical reviews reporting on configurations, technologies, infrastructure, and more.  Security audits are vital to helping an organization plan and develop better security practices across the IT environment.

An IT risk assessment is a key preventive measure that actively mitigates the risk of vulnerabilities and threats negatively impacting the organization.  Risk assessments are very important for security teams and they should be performed regularly with the findings shared with all relevant employees and board members.  IBIGA has Subject Matter Expert (SME) experience in the National Institute of Standards and Technology (NIST) Risk Management Framework. The Risk Management Framework (RMF) is a set of information security policies and standards for federal government agencies.
.

————————————————————————————