Platinum

For an overall organisational view, the package can be used to provide a detailed understanding of the organisations security posture control review, training and awareness review, policy and process review, physical security review, ITHC and aGap Analysis to an agreed security standard (e.g. ISO27001). 

The Platinum bundle can be used to provide a detailed review of the organisations security posture. RBC Group consultants will review the security controls currently implemented, including perimeter security, access control, vetting and employment checks, remote access, mobile devices usage, ICT acceptable use, patching and anti-virus, change control and risk management, amongst others. Also reviewed will be security training and awareness provision and the material in place to provide this to staff and third parties. A fundamental review of the policies and processes in place, in line with ISO27001 and ISO27002, with suggestions on improvements and missing documentation were necessary.

A basic physical security review can be conducted in line with ISO27001 and the requirements for storage of HMG data marked as OFFICIAL, this will include the requirements for CCTV, security guards, and access control. A suitable scoped ITHC can be provided, though scale and scope will need to be agreed beforehand, this will primarily focus on perimeter security and configuration of firewalls, routers and basic DDOS tests. Finally, a gap analysis against the ISO27001 controls set will be produced with recommended improvements where necessary. A standardised report will provide summary of all the findings.

A Platinum level package can also be used to provide a detailed risk assessment document to an agreed methodology or an update to a previously written document that requires to be moved into a new format; such as an IS1/2 RMADS.