TRS Group understands information systems security. Our professionals can help you prevent revenue losses and minimize risk as you create, enhance, or overhaul your information systems. Our consultants stay apprised of industry standards, best-of-breed technologies, and best practices. As a member of your team, TRS can provide practical solutions to help deter intrusions, misuse, computer fraud, and industrial espionage.

Risk assessments combine knowledge of business objectives, information flow, safeguard requirements, network architecture, and operational policies and procedures. TRS Group's CDF Framework follows a rigorous process that enables us to perform a comprehensive assessment and customize a security solution that fits your specific operational needs.

IT Vulnerability Assessment:

TRS’s IT Vulnerability Assessment reviews your current platforms, operating systems, applications and networks to insure that they are in compliance with Sarbanes-Oxley (sections 309, 402 and 404), and HIPPA Security requirements.

Our consultants will assess those areas of vulnerability by unauthorized access to sensitive data and information specific to your accounting, CRM, sales, application servers and database systems regarding the following:

• Physical access to documents and computer systems
• Data valuation/classification § Risk Analysis and management
• Logical access controls (permissions management) to system resources
• Firewalls, and strong firewall policies
• Acceptable Use Policies
• Requirement of strong passwords
• Log file and Intrusion Detection Systems alert archival
• Logging of access to information and systems
• User security event reporting mechanisms
• Anti-virus protection
• Personnel policies regarding revocation of access for terminated employees/contractors
• Information assurance policies and mechanisms (data tampering)
• Certification of system security
• Systems and data inventory
• Systems and data disposal policies and procedures
• Control of systems / equipment entering and leaving the physical site
• Physical security plan for the site
• Physical security infrastructure maintenance records
• “Need to know” information access policies
• Sign in and/or escort requirements for site visitors