Security and Compliance

SummaTG’s security and compliance practice works with clients to define key procedures and processes required in order to AVOID the costs and headaches of compliance audits.  In fact, many of our customers pass their compliance audits such as PCI on the first pass, experiencing no issues from auditors.  This is accomplished through a thorough design of processes, policies and procedures.

Phase 1 is typically an assessment which includes a detailed gap analysis of your organizations controls including business and technical processes, policies, procedures and technical solutions to determine which requirements are not being met.

Follow on phases are determined by the findings from the gap analysis, plan is developed to plan to quickly obtain compliance in a cost effective manner.

Examples of Phase 2, includes developing Security Policies, User Account Management Process, Security Awareness Training, Reducing compliance scope with Data Segregation

• Additional Service Offerings
• Network and Application Vulnerability Assessments
• Helping to build an effective Security Program
• Security Compliance
• Network Security Architecture
• Risk Assessment
• Security Policy/Procedures Development