Identifying Network Security Risks

• ERE provides top down risk analysis to identify security, privacy, and compliance risks and translates them into business costs. We identify and correlate threats and compliance violations and calculate risk with textbook industry standard methodology:
  • STRIDE and DREAD risk assessment.
  • ROSI (Return on Security Investment).
  • Annual loss expectancy and residual risk.
• Show clients how to estimate costs of potential legal liabilities, damage to reputation, loss of production, and how to incorporate them into the IT Governance process.
• Our methodology of discovery is the IT security compliance audit.
• Ron Lepofsky has published several articles on how to manage IT Security risk:
  • Quantifying Risk and Cost of IT Security Compliance
  • Calculating IT Security Risk

IT Security Compliance Audit

Our IT security compliance audit service correlates network security risks with the audit points of any applicable compliance standard. We act as risk security auditors by associated both a business risk and a technical risk with each security vulnerability.

• Correlate security and privacy risks we identify with industry standards and regulations.
• Triage and rate each risk to prioritize remediation steps.
• Calculate the potential business cost for each risk.
• Create a pro-forma business case to cost justify all the recommendations within our IT Security Compliance Audit.

Computer Security Compliance Verification

ERE information security auditor service makes it easier for clients to answer their financial auditor’s questions with regards to IT security, with our computer security compliance verification:

• We respond to each pre-determined control point identified by the auditor with our periodic compliance audit.
• We provide the requisite ongoing process to identify compliance violations and how to fix them. with our 7x24 security and privacy compliance audit.
• We examine compliance with all the auditors’ control points and we never forget to identify fundamental Security Internet threats and risks.

IT Security Governance Consulting

• Assist our clients to build IT Security Governance programs.
• Focus on aligning risk management with critical business goals.
• ERE has created a simplified IT Security Micro Governance process.

Corporate Overview

• Our sole business is providing IT security / privacy services: IT security compliance audit, privacy audit, risk analysis, and consulting.
• Clients: asset managers, electrical utilities, financial / mortgage managers, software developers, real estate managers
• More details in the Corporate Information page.