ISO/IEC 27001 Compliance Audit

We offer a preliminary to full audit service to evaluate the information security management system (ISMS) against ISO/IEC 27001 standards. This includes evaluating the equipment, policies, procedures and controls that the client has in place to ensure the management of information asset risks. The audit results in a detailed report on compliance gaps and a strategic plan for better adoption and implementation en route to achieving, if necessary, certification. Increasing customer credibility and security posture. Our motto is "it's better to have and not need, than to need and not have". Because (cyber)Security is our goal.

NIS2 Compliance Audit

The NIS2 Compliance Audit is designed to help organizations align with the rigorous cybersecurity requirements of the NIS2 Directive. This audit ensures that your infrastructure, processes and security measures comply with regulatory standards, protecting your critical assets against cyber threats, identifying gaps to ensure compliance with European standards. By performing a thorough assessment, we identify vulnerabilities, provide actionable insights, and support your organization in achieving full compliance, thereby improving your overall cybersecurity posture and resilience.

SOC2 Compliance Audit

SOC2 Compliance Audit is designed to assist organizations to align with the robust data security and privacy standards of the SOC2 framework. This audit ensures that its systems, processes and controls meet the criteria for safeguarding sensitive data, identifying vulnerabilities, and closing any gaps to achieve full compliance. Through a comprehensive assessment, we provide actionable recommendations to improve your organization’s data protection practices ultimately strengthening trust, operational efficiency and resilience against potential security threats.

DORA Compliance Audit

The DORA Compliance Audit is tailored to help organizations meet the strict requirements of the Digital Operational Resilience Act (DORA). This audit ensures that IT infrastructure, risk management practices, and operational resilience strategies of your organization align with regulatory standards, safeguards against interruptions and cyber threats. By conducting a complete analysis, we identify potential risks, offer actionable insights and help your organization achieve full compliance, thus reinforcing your ability to operate in a safe and sustainable manner in a digital environment.

Whistleblower Compliance Audit

The General Protection Regime for Reporting Infractions (Decree-Law No. 93/2021), in force from January 1, 2022, establishes protections for whistleblowers in Portugal. This law ensures that individuals who report legal violations, whether within organizations or to external authorities, are protected from retaliation. Requires entities with 50 or more employees to implement secure internal reporting channels and guarantee the confidentiality of whistleblowers. The decree is a crucial step in promoting transparency and accountability, ensuring that whistleblowers can report misconduct without fear of reprisal.

Wireless Security Audit

This specialized audit examines the security of wireless networks within an organization. It involves analyzing the security protocols in place, configuring wireless access points, and methods used to authenticate devices and users. The audit identifies vulnerabilities in the wireless network that could allow unauthorized access or data leakage, or the failure of required coverage. Recommendations are provided for improving wireless security, the number and optimal location of access points, as well as the use of advanced encryption, secure authentication mechanisms, and regular monitoring for unauthorized access attempts.

IoT Security Audit

As Internet of Things (IoT) devices become increasingly prevalent in business environments, securing these devices becomes critical. This audit reviews the security measures for IoT devices deployed within the organization, such as sensors, smart devices, and industrial control systems. The focus is on the device security, data integrity, and the network connections they utilize, providing recommendations for securing IoT ecosystems against potential cyber threats.

Endpoint Security Audit

This audit assesses the security measures in place for all endpoint devices within the organization, such as desktops, laptops, and mobile devices used in the office and for remote work. It checks for vulnerabilities in device configurations, the effectiveness of antivirus and anti-malware solutions, and the enforcement of security policies across all endpoints. Recommendations may include enhancing endpoint protection platforms (EPP), implementing stricter device management policies, and regular security patches and updates.

Remote Access Security Audit

With the increasing use of remote work arrangements, this audit focuses on the security of remote access systems, including VPNs and other remote desktop solutions. It evaluates the security protocols, authentication methods, and access controls to ensure they provide secure connections without exposing the network to additional risks. Recommendations could involve upgrading VPN technologies, multi-factor authentication, and continuous monitoring of remote access activities.

Laptop Security Audit

This specialized audit examines the security posture of laptops used internally and remotely. Analyzing physical security characteristics, security software configurations, behavioral methodologies and data encryption practices. The audit also assesses compliance with corporate policies regarding data storage and use of devices outside of the office. Enhancements may include full disk encryption, improved authentication systems, and secure configuration guidelines for users.

Network Access and Control Audit

Focusing on the infrastructure that supports both on-premise and remote connections, this audit analyzes the network access control (NAC) systems to ensure that only authorized devices and users can access the network. It checks for the robustness of network segmentation, the effectiveness of firewalls and intrusion detection systems, and compliance with internal and external network access policies. Recommendations are likely to focus on strengthening network perimeters, refining access policies, and implementing advanced network monitoring tools.

Backup and Disaster Recovery Audit

Our backup and disaster recovery audit is specifically designed to assess and improve organizations' resilience against data loss and to ensure rapid recovery in any disaster scenario. This audit evaluates current backup practices, disaster recovery plans, and overall business continuity strategies. The audit is meticulously designed to strengthen organizations' ability to withstand and quickly recover from disruptive events, ensuring business continuity and data integrity, aligned with the latest industry standards.