Security Risk Assessment and Compliance Analysis eircom and Espion

							                                                                                  Solution
Security Risk Assessment and Compliance Analysis
eircom and Espion helping your peace of mind

In today’s increasingly regulated business environment, complying with legislation
means enterprises must evaluate controls around key IT systems, policies and processes.
A Security Risk Assessment and Compliance Analysis from eircom and Espion will
ensure your enterprise has the minimum level of acceptable risk and avoids the pitfalls of
non-compliance - prosecution, heavy fines, adverse publicity and potential jail sentences
for directors.

Seize the benefits of                      The burden of compliance
Security Risk Assessment                   The impact of compliance continues to widen in scope to cover whole industries,
and Compliance Analysis                    all types of companies and even specific business process. It is now a given
                                           that enterprises today need a formalised approach to managing enterprise risk
/ Provides benchmarking assessment
                                           and compliance, however, tight IT budgets and limited headcount dedicated to
  against peers and industry
                                           compliance tasks are putting added strain on already taxed IT departments. eircom
  standards
                                           and Espion can help you maximise your resources to achieve a new level of risk
/ Ensures peace of mind                    mitigation and operational efficiency with our proven Security Risk Assessment
                                           and Compliance Analysis methodologies.
/ Satisfies Internal Audit
                                           Expertise you can rely on
/ Provides Gap Analysis to standard(s)
                                           eircom has a proven track record in the design, implementation and management
/ Enables you to assess and prioritise     of IP security solutions, via our wholly owned subsidiary Lan Communications.
  risks                                    Together with our strategic partner Espion, we bring a blend of information security
                                           specialists with backgrounds in management, engineering, systems architecture
/ Illustrates the nature of the risks to   and consultancy to create a uniquely intelligent and creative IT security business
  your business                            that ensures you are equipped to secure your organisation in compliance with
/ Shows tolerance as to the                international standards.
  likelihood and consequence of a          Together, eircom and Espion can address your security needs from policy definition
  threat being realised                    and assessment, through process and infrastructure design, to operation and
                                           on-going preparedness for accreditation and audit. You can rest assured that all
/ Identifies steps required to fix
                                           of the security and compliance solutions we can provide to your organisation will
  vulnerabilities
                                           be framed in the context of an overall policy informed by your specific risk profile
/ Shows estimated cost of remedial         and compliance concerns. Espion can identify compliance gaps or required process
  action                                   enhancements and Lan Communications are available to deploy market leading
                                           security architecture and operational support.




www.eircom.ie/government
                                                                                         Discover
                                                                                                      Design
                                                                                                 Deliver
Did You Know?                             What can eircom and Espion do for you?
If your business relies on computer       Security Risk Assessment
systems to store, process or move
                                          A Security Risk Assessment presents a realistic impression of your organisation’s
confidential or sensitive information,
                                          security risks, enabling you to make wise choices for managing uncertain risks. Our
then you need to be aware of the
                                          reports detail the vulnerabilities and compliance issues found and the corrective
risks associated with these processes.
                                          actions required to secure critical systems and mitigate identified risks. Risk
There are numerous risks associated       assessments can assist in highlighting operational risk that can cause several hours
with impact of an information security    of downtime, loss of revenue and loss of reputation.
incident.
Outcomes can include:                     Compliance and Standards Analysis and Assessments

/ Loss of customer information            To assist you in implementing globally accepted controls frameworks (ISO 27001,
                                          ITIL, or CoBIT) we provide a systematic approach to analysing key risk areas,
/ Loss of business critical information   identifying and documenting the controls and then monitoring and measuring the
/ The introduction of viruses / worms     compliance.
  to your network
                                          Compliance Gap Analysis
/ Damage to your corporate image
                                          The ISO27001 standard provides a structured framework for the implementation of
/ Operational problems and huge
                                          an Information Security Management System (ISMS) within your organisation. We
  costs to rectify
                                          provide full ISO 27001 compliance and pre-certification audit services via our team
/ Legal problems and costs                of experienced ISO27001-certified lead auditors and implementation experts.

                                          Business Continuity Management Assessment Testing & Planning
Your best defence                         Our Business Continuity Management services are based on PAS56 (BS25999).
                                          We help you evaluate information assets and its criticality levels in determining
Educating personnel in IT security is
                                          the strategies for minimum loss in productivity through optimum utilisation of
an organisations best defence against
                                          resources. The service is designed to
the ever-increasing threat from hacker
attacks, fraud and viruses. Espion        / Minimise disruptions of business functions and external entities
offers specialised training solutions,
                                          / Provide roadmap for disaster recovery operations
designed to empower business in the
application of best practice where IT     / Ensure timely resumption of normal business at earliest possible time
security frameworks and protocols are
                                          / Limit impact of disruption on company’s mission and reputation
concerned.
                                          / Limit financial losses

                                          For more information on how a Security Risk Assessment
                                          and Compliance Analysis from eircom and Espion can
                                          benefit your organisation, contact your eircom account
                                          manager




www.eircom.ie/government