TraceSecurity’s solutions help businesses meet specific regulatory and best practice challenges from GLBA, SOX and State Privacy Laws. The increased dependency on technology presents additional challenges for an organization to protect confidential data and ensure availability and integrity of systems that support internal functions and privacy of customer information.
To address the above challenges, the organization must have an Information Security Program that addresses the security threats related to people, processes and technology. An Information Security Program should include:
- A Risk Management Program to ensure that risk are identified and prioritized to mitigate risk to confidential information
- Information Security Policy and Procedures
- Vulnerability Management Program
- Ongoing Testing of the Information Security Program
- Independent Testing
- Self Assessment
- Audit of Security Controls
- Employees training and testing on Information Security Program
How TraceSecurity Helps
| TraceSecurity Solution | Description |
| Risk Assessment | Identify reasonably foreseeable risks that could result in service interruption or unauthorized disclosure, misuse, alteration, or destruction of confidential information. |
| Security Assessment | Independent test of the Information Security Program. |
| IT Security Audit | Audit of the controls supporting the Information Security Program. |
| Penetration Testing | Test of weaknesses using ethical attempts to exploit vulnerabilities. |
| Social Engineering | Test if employees are adhering to security policies. |
| Web Application Test | Manual testing for application layer vulnerabilities. |
| Security Training | Customizable security awareness training. |
| TraceCompliance Manager | Web-based Security Compliance Management console that includes the following modules. |
| TraceAssess | Allows the organization to conduct unlimited, on-demand network vulnerability scanning. |
| TraceAlert | Vulnerability and patch alerting system specific to company’s hardware and software. |
| TraceComply | Allows the organization to facilitate an ongoing review of its compliance with relevant industry security requirements. |
| TracePolicy | Reduces cost and effort in creating security policy, distributing policies and reporting on acceptance of policies. |
| TraceTrain | Allows the creation of internal training of employees on policies, security and other topics, resulting in reduced training costs |
| TraceMonitor | Monitor files and URLs for modification. |
| TraceReport | Provides on-demand board, management, auditor, and technical reporting for all TSCM modules. |
| Trace RiskManager | Web based software that facilitates the internal Risk Management program. |
| Trace IT Audit Manager | Web based software that facilitates an Internal Audit Program. |
