The implementation of new applications and changes to existing applications can lead to the introduction of security exposures. Additionally, changes to system configuration settings and the modification of existing processes may weaken security controls. Therefore, the security of the overall processing environment must be considered during the planning, development, implementation, and post-implementation phases of IT projects.

Proper testing and analysis are necessary to determine whether related processes and systems may be impacted as a result of planned projects. The performance of a security impact assessment enables the identification of security vulnerabilities and risks. As a result, security controls can be designed during the development of the project and subsequently implemented into production.

During the performance of the security impact assessment, we consider both external and internal threats to the organization. We analyze the impact on security management, monitoring, processing, and user functions. Based upon the results of the assessment, we offer recommendations to address the identified security exposures, such as the implementation of system controls or the creation or refinement of policies and procedures.


To learn more about how we can assist you, please contact us.