Risk management, product evaluation, and ITS system design and implementation services
Under the Risk Management, Product Evaluation, and ITS System Design and Implementation services tier, we provide independent and objective review and assessment of client program for each service categories as defined bellow.
Risk Management includes the following services:
- Performance of Risk Assessments
- Threat Assessments
- C&A Support
- Business Continuity Support
- CDR Planning
- SOS Studies
- Data Security Designation/Classification Studies
- Security Policy/Procedure/Guidelines Development
- PKI Interoperability and Governance Studies
- PKI Certificate Policy and Practice Statement Development
- PKI CP Compliance Inspections and Audits
- Mathematical Risk Modeling
- Security Awareness Training
- IT Security Audits
- The second is Product Evaluations, which includes:
- Product Evaluations themselves,
- The Development of Product Assessment Methodologies
- Product Evaluation Policies/Procedures/ Guidelines.
Design and Implementation of ITS Systems includes the following services:
- Conducting Requirements Analysis and Studies
- Options Analysis
- Security Architecture Designv
- Project Management Support To It Security Related Projects
- IV&V Support
- Prototype Design and Development
- Impact Analysis For Software and Major Configuration Change Implementations
- ITS Systems Implementation Support
- PKI Training.
Information Infrastructure Protection Services
Under the Information Infrastructure Protection Services tier, the AEPOS team supports GoC Institutions with the protection of their information infrastructure, including the following services:
- Assisting Conducting Network Penetration Tests
- Network Vulnerability Assessments
- Analysis of Threat Agents
- Analysis of Attack Tools and Techniques
- Incident Analysis Support
- Incident/Threat Awareness Training
ITS Research and Development
Under the ITS Research and Development service tier, our consultants work with Federal Government departments in providing ITS research and development activities such as:
- Development of Procedural and policy Guidelines related to ITS R&D activities,
- Development of Technical Standards and Guidelines for ITS R&D activities,
- Planning, Analysis, Assessment and other tasks relating to the conduct of R&D activities aimed at improving the GoC's security posture.
- Design/Development of Security Protocols,
- Design/Development of prototype Software/Hardware to implement security functions
- R&D into firewall, IDS, content checker technologies, development of new techniques of performing similar tasks.
| 
