Our audits are a systematic, documented, and independent process that enables us to obtain objective evidence, allowing us to accurately assess the level of compliance with the audit criteria
Our certified auditors have proven experience with a wide range of standards, whether general, regulatory, or business-specific.
An example of our experience as auditors is based on audits conducted to assess the current level of maturity and compliance with the following frameworks:
National Cybersecurity Reference Framework - CNCS
Information Security Management Systems - ISO 27001:2022
GISG - Global Information Security Group
Audits of Critical Infrastructures (Network Systems & ICS)
Business Continuity Management Systems - ISO 22301
Center for Internet Security - Critical Security Controls
Get to know the security level of your organization with our services related to
AUDIT | TRAINING | AWARENESS
The security of your assets should not be ignored by any of your stakeholders, nor should it only be considered when a failure occurs. As such, you should rely on security audit services, and we can provide exactly what you need. We are a company certified by ISO 9001 and ISO 27001, and we have a team of certified auditors who will help protect your assets.
We conduct security tests and audits on your assets to identify potential risks, as well as provide actionable proposals for mitigating the identified risks.
We have qualified resources in the areas of security, privacy, business continuity, and forensic computing, and we are available to assist our clients in the assessment, definition, and adoption of security controls by applying best practice guidelines regarding Information Security and Privacy Management according to the relevant standards. This multidisciplinary team includes professionals from the following area:
Legal
Forensic Computing and Analysis
Information Privacy Professionals (we are members of the IAPP)
IT Solution Architects
Compliance Office Managers
Cybersecurity
Risk Chief Officer
Technology Engineers and Software Development
Security QA Testers
Security Code Reviewers
We conduct audits in various areas of cybersecurity to provide you with an understanding of your corporate security level, allowing you to assess risk (Risk Assessment). We issue detailed reports on the non-conformities found and include a score for the potential threats identified.
We raise awareness among all your stakeholders about the importance of respecting the obtained results by sharing the potential impacts of vulnerabilities and ways to mitigate them.
We provide specialized training in various areas of security to address all of your needs (security applied to technological infrastructures, software development security, network and system security, etc.). Our accumulated and broad expertise allows us to respond effectively to your complex and critical challenges.
The technical security audits begin with a process of gathering information about the system/infrastructure to be audited. This allows us to identify which areas may be more susceptible to vulnerabilities, enabling us to prioritize them accordingly.
After analyzing the collected information, actions are taken to identify vulnerabilities in your system. An analysis of the found vulnerabilities is conducted and later included in the final report, where they are classified by their level of severity, using international standards (including CVSS).
We typically also audit your web applications not only for vulnerabilities but also, among other things, to assess the security criteria regarding your data and access policies for critical databases in your business. Issues such as Spoofing, Tampering, Repudiation, Information Disclosure, DDOS, Elevation of Privilege, SQL Injection, etc., are detected to be timely mitigated.
The vulnerabilities found throughout the process can be exploited, without causing harm, if agreed upon, to truly understand the extent of the problem and also to eliminate false positives, resulting in a more detailed and accurate final report.
We can even conduct Social Engineering attacks to assess how susceptible your organization is to them, contractually providing an online and updated platform for cybersecurity training. This ensures that your organization stays informed and never loses focus on the respect and attention required for the threats and vulnerabilities that cybersecurity demands on a daily basis.
From SMEs to the largest public government agencies in Portugal, we have hundreds of GDPR implementation and auditing projects.
The specialized resources we provide to our clients to work in this area are multidisciplinary, agile, and hold international certifications, including but not limited to:
ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
ISO 27032 Lead Cybersecurity Manager
ISO 27005 Sénior Lead Risk Manager
YOUR TRUSTED PARTNER
We are certified by international standards:
ISO 27001 (since 2018)
ISO 9001 (since 2003)
And all the areas of our certifications focus precisely on our specialized services.
With pride, our clients impartially testify to our work. Know who they are and talk to them.
It's common in cybersecurity... We're here for you.
