CSO Compass Vision
You have your business mission
You know your business. You are focused on it's success. You are passionate about your company.
You do, however, have information security to deal with. It's a complicated, regulation-rich part of any online business that requires specialized knowledge and experience.
We have our mission
We understand information security and are here to help you. We are passionate about information security.
According to industry data companies generally employ about one information security specialist for every 100 developers they employ. One information security employee cannot cover all the bases effectively. What can you do? Well, we favor a team approach. Our team of experts working together with your existing staff to navigate the Information Security landscape for your business.
Our services and products are based on a set of principles:
- Information Security is complicated; it's no longer simply about network perimeter security
- There is no one size fits all solution
- Information Security regulation is increasing with time
- We have firsthand experience in sensible Information Security
- We have wisdom in the Information Security space
- We work to remove obstacles for your team
Information Security taxonomy coverage
Based on the taxonomy of Information Security specified in the ISO/IEC 27002:2005 standard we can provide support in all areas.
The following table summarizes our coverage.
| Major Area | Coverage | Team Experience |
|---|---|---|
| Security Policy | Yes | Yes |
| Asset classification and control | Yes | Yes |
| Personnel security | Yes | Yes |
| Physical and environmental security | Partial* | Yes |
| Communications and Operations management | Yes | Yes |
| Access control | Yes | Yes |
| System Development and maintenance | Yes | Yes |
| Business Continuity management | Yes | Yes |
* Regarding physical and environmental security – our emphasis is on information security aspects of physical security more than the building security.