Helping organisations identify, understand, reduce,manage and respond to cyber risk
Specialist Information andCybersecurity Consultancy
150 Minories LondonEC3N 1LS
+44 ( 0) 20 7164 6693
https://cortida.com
+44 (0) 20 7164 6693
https://cortida.com
ABOUT CORTIDAINFORMATION AND CYBERSECURITYCONSULTANCY
Cortida helps organisations identify, understand andprotect against cyber risk as well as respond, navigate andrecover from malicious attacks and accidental datadisclosures. Best of breed consultancy services help organisationsimplement appropriate security measures, align withstandards, audit against security requirements and ensurecontinuous security and awareness become part of anorganisation's culture. Our aim is to reduce the likelihood and impact of cyberand data incidents and always provide considered risk-based advice that inform great security decisions. Consultancy is delivered through a comprehensiveportfolio of services and by knowledgeable andexperienced consultants. WORLD CLASSEXPERIENCED, RISK-BASED &APPROPRIATE ADVICE
Cortida consultants are hand picked for their ability toapply experience and intelligent thinking to securitychallenges. Each has excellent demonstrable experienceand collectively the experience spans numerous securitydomains, industries and organisations of varying size,geographical distribution, complexity, needs and attitudetowards risk. Few projects are too small, too big or too far away andevery project is approached with Cortida's foundingprinciples of delivering risk-based advice and beingmindful that security advice must support rather thanconstrain an organisation's objectives.
World-classSecurity
Consulting
Reducing riskat the fastest
rate
+44 (0) 20 7164 6693
https://cortida.com
CYBERSECURITY SERVICES OVERVIEWCortida services sit across six security domains - Consulting, Penetration Testing, Detectionand Response, Security and Awareness Training, Audit and Virtual Support.
03
Identify risks, determinestrategy, align and comply
C O N S U L T I N G
01 Train leaders and employees and embed security culture
S E C U R I T Y T R A I N I N G
04
Identify app, device, cloud andinfrastructure vulnerabilities
P E N E T R A T I O N T E S T I N G
02 Prepare and support yourorganisation's security audits
A U D I T S U P P O R T
05
Monitor for threats andrespond to incidents
D E T E C T & R E S P O N D
03 Progress projects and governsecurity through extendedteams
V I R T U A L S U P P O R T
06
APPROACH AND COMMITMENT
Distinct Approach - Use knowledge and
experience to ensure recommendations
are appropriate, mindful of your
objectives and risk and never overblown.
Creative Thinking - Creative in our
thinking we ensure assessments and
recommendations go further than
ticking boxes.
Commitment to Clients - Honest and fair
in our dealings and will deliver insights,
quality and value in every engagement. Fitting advice
CONSULTING SERVICES
Experienced consulting that starts by understanding your critical data andsystems and business objectives.
Regardless of whether a security project iscommissioned to prevent a threat, improvea security posture, comply with amandated obligation or respond to a threat,they always start by establishing anelevated understanding of your businessand it's objectives. It is the heart ofappropriate and personalised advice.
Too often security reports are written solelyfor a technical reviewer. Cortida projectsconsider people, process, physical andtechnology arrangements. Every report iswritten in a way that is mindful of theintended audience and includes clear,actionable and prioritisedrecommendations.
+44 (0) 20 7164 6693
https://cortida.com
RISK AND COMPLIANCE
S T R A T E G I CA S S E S S M E N T S
C O M P L I A N C ES E R V I C E S
G O V E R N A N C ES U P P O R T
Strategic services help organisationsidentify risks associated with criticalsystems, assess the maturity of in-placeprotections and then plan and introduceappropriate security measures.Compliance support helps organisationsselect, understand, align and maintain
compliance with security benchmarks,standards, contracts and regulations.Governance support helps organisationsintroduce a means by which security andprivacy efforts can be directed andmanaged to ensure continuous rather thanpoint in time security.
Understand risk and apply appropriate security with the right priority
+44 (0) 20 7164 6693
https://cortida.com
PENETRATION TESTING
Organisations have embraced cloudcomputing and attackers are targetingcloud environments with vigour. Testingdeployments and configurations in clouddeployed systems is essential. Cortida's cloud testing and configurationreview service focus on commonly usedplatforms such as Amazon Web Services,Microsoft Azure and Google Cloud Platform.Office 365 and hosted virtualisation systemtesting is also available.
Cortida penetration testing services helporganisations identify exploitableinfrastructure, device, application and APIvulnerabilities, they also assess networkdesign, configuration and segregation froma security perspective. Testing is conducted using a choice ofstrategies including, Black, White and GreyBox testing. Reports detail the severity and root causeof vulnerabilities and recommendtreatment measures and prioritisation.
See whatattackers seeand act first
Lifecycle testing services assess howsecurity testing is embedded into thedevelopment, deployment, operational anddecommissioning stages of applications andsystems.
Identify exploitable vulnerabilities
T R A D I T I O N A L T E S T I N G
L I F E C Y C L E T E S T I N G
C L O U D T E S T I N G
+44 (0) 20 7164 6693
https://cortida.com
DETECTION AND RESPONSE
I N C I D E N TP R E P A R E D N E S S
A T T A C K D E T E C T I O N
I N C I D E N TR E S P O N S E
Incident response preparedness serviceshelp organisations anticipate, prepare andimplement response plans. Planned,trained and rehearsed teams perform withconfidence and speed during the chaoticand pressured early minutes and days of anattack, thereby reducing the likelihood ofdelay or damaging errors.
Powered by technology, detection services,help organisations identify vulnerabilities incritical devices by scanning and monitoringnetwork traffic for threats. Logs areassessed for suspicious activities andsecurity breaches are reported andresponded to according to an agreed SLA.
Attacks happen quickly but discovery is slow.Recognise attacks and be rehearsed
+44 (0) 20 7164 6693
https://cortida.com
AWARENESS AND TRAINING
Security awareness and training services help business leaders and employeesunderstand the security landscape along with key issues and threats relevant to theirrole. Training arms individuals with skills necessary to recognise issues and respond.Through instructor led and computer or scenario based training services,organisations reduce the likelihood of becoming victims of attacks.
Employees are highly targeted by cyber criminals because of their trusted nature,network access and often lower level understanding of security.
Employeeawareness
training
C-Suitebriefings
SoftwareDeveloper
training
Securing organisations through education
+44 (0) 20 7164 6693
https://cortida.com
AUDIT SERVICES
Cyber risk has grown rapidly and leaders,regulators, professional bodies andcustomers now have an expectation thatthose who access data and systems willapply technical and organisationalmeasures to keep them secure and private,the result has been increasing auditrequirements. Cortida audit services prepareorganisations for external assessments andwhere required, provide support duringaudit to ensure the most accurate andfavourable security position is identified. Audit services are available across a rangeof security and privacy regulations,standards or benchmarks.
Validate security position through audit
C O M M O N A R E A S O F S U P P O R T
ISO/IEC 27001
CYBER ESSENTIALS & CE PLUS
CIS CRITICALSECURITY CONTROLS
3RD PARTY SUPPLIERS
NISTPCI DSS
+44 (0) 20 7164 6693
https://cortida.com
VIRTUAL SUPPORTAvailable from a small number of days each month to full time embedded teams,virtual services offer a flexible alternative to insourcing. Virtual Consultants quicklybecome trusted members of your team and can define strategy, support everydaysecurity operations activities, measure, analyse, evaluate and lead security, privacyand governance functions. Virtual Consultants are highly experienced and are available to fulfil security, privacyand governance needs. Cortida consultants are also skilled communicators capableof representing the function at board level.
Governance &Compliance
InformationSecurity
DataProtection
Outsourced experts who fill resource gaps,progress projects and lead internal teams
+44 (0) 20 7164 6693
https://cortida.com
PRODUCTS AND SERVICES
G R C C O N S U L T I N G
P E N E T R A T I O NT E S T I N G
D E T E C T I O N A N D R E S P O N S E
Security Strategy ReviewSecurity Risk AssessmentsControls Reviews & GapsCompliance AssessmentsStandards AlignmentPolicy DevelopmentSupplier Assessments
Comprehensive service portfolio
Build & Config ReviewsVulnerability ScanningInfrastructure TestingApplication TestingMobile & Device TestingWireless TestingCloud TestingLifecycle Testing Code Review
Policy CreationRun Book ReviewsIncident TrainingResponse Team Testing24x7 MonitoringPost Breach Response
A W A R E N E S S A N DT R A I N I N G
Executive BriefingsEmployee AwarenessSecurity Training forSoftware Developers
A U D I T S U P P O R T
Audit PreparationAssisted Audits
V I R T U A L S U P P O R T
Virtual CISOVirtual DPO
Are you shining a light in the right places andchecking for the right measures?
CALL NOW AND FIND OUT HOW RISKASSESSMENTS REDUCE RISK AND COST
150 Minories
London
EC3N 1LS
+44 ( 0) 20 7164 6693
https://cortida.com
Information and cybersecurity assessments illuminate risk and establishwhether efforts are focused on what matters most to your organisation.
