Security Reviews and Security Testing

Why is a security risk analysis Important?

Securing networks and systems is not the only critical aspect of security for organizations - physical security is imperative. If a bad actor can gain physical access to a network or system, they can gain access to all information and/or data on the networks or systems with little or no technical knowledge required. The importance of an organization’s physical security cannot be overestimated.

The Solution

The Fortra’s team of highly trained security analysts is ready to provide your organization with a comprehensive assessment of the current state of physical security for administrative buildings and branch locations. Our service offerings include:

•  Interviews conducted with a sampling of employees to identify knowledge of policies and procedures
• Technical interviews conducted with IT department and Facilities personnel
• Physical site reviews of selected building(s)
• “After-hours” physical security sweeps
• Comprehensive assessment of physical security
• In-depth policy and security examination • Detailed written report of all findings

Find Out What They Don’t Know

Fortra conducts interviews with employees to assess knowledge of physical security policies, identify procedures, and allow our security analysts to pinpoint areas of awareness that need improvement. Topics covered in employee interviews include, but are not limited to, encryption, disaster recovery, incident response, social engineering, backups, physical and logical access controls.

Weak or Strong?

Physical site reviews help Fortra security analysts uncover weak points in the current physical security process. These reviews include:

• Evaluation of interior and exterior CCTV coverage
• Assessment of internal and external entrance controls
• Door locks and enhanced security system assessment
• Wireless sweeps
• Assessments of server room access and disaster protection controls
• Assessments of possible IT vulnerabilities

The “after-hours” physical security sweep provides an additional layer of security analysis, by identifying if employees are following “clean-desk” policies, discarding sensitive data appropriately, locking work stations, and keeping passwords safe by checking employee workstations and common areas.

Information is Power Results are Key

At the conclusion of the engagement, Fortra will provide a detailed report with specific and risk mitigation recommendations. This includes an overview of risk management and comparison to best practices, along with detailed site findings with ratings of where efforts should be focused for highest security impact.

Fortra allows organizations to gain knowledge of the organization’s true level of physical security and assess how best to approach mitigation of all risks presented. Gain peace of mind in knowing exactly which areas are secure and which need improvement.