SAR - Secure Architecture Review | ISGroup - Information Security Group

Secure Architecture Review (SAR)

The purpose of the Secure Architecture Review service is to assess the current state of security on IT infrastructures and correct any defects.

The ISGroup team has extensive experience when it comes to complex infrastructures.

The team of experts, having worked in the field for many years, has vast expertise covering many technologies in the fields of networks, cloud, or custom projects.

Thanks to this expertise, the team will be able to highlight known issues and suggest corrective measures to mitigate any type of attack.

Request a quotation for
Secure Architecture Review (SAR)

Schedule an appointment

Or call us at
(+39) 045 4853232

scrivi su WhatsApp

Description

The ISGroup Secure Architecture Review service is divided into three main steps:

Preliminary Analysis Phase

Starting from the documentation regarding the design and development of the infrastructure, ISGroup will evaluate the design choices. By opening a dialogue with analysts, developers, and/or technical staff who created the application, the team of experts will be able to discover design flaws and document them.

Risk Analysis

Based on the results of the preliminary analysis, the team of experts will assess the potential impact that the identified issues may cause.
In this phase, specific exploits for the infrastructure will be considered, and their results will be evaluated to study the impact they could have on the company.

Report

All steps and issues will be documented and delivered to the client professionally. Improvements or corrections will also be proposed to make the infrastructure more secure.

Specifications

Given the team's experience, ISGroup will be able to evaluate numerous aspects of the architecture to discover critical issues.

Depending on the type of infrastructure being worked on, the team will be able to focus on aspects that typically lead to security issues. In any case, the following will also be fully evaluated:

SDCL
Code Quality
Testing Routines
Authentication
Authorization
Encryption Used
Web Server
Database
Firewall (Web or Network)

The result of such a comprehensive test will be a report containing discovered vulnerabilities and critical issues, the risks these vulnerabilities expose the company to, and a series of architectural corrections necessary to mitigate the risks.

Output

At the end of the intervention, ISGroup will provide a report divided into 3 parts:

Executive Summary
High-level summary of the security of the analyzed infrastructure. This document does not go into technical details but rather offers an overview understandable by non-technical personnel.

Vulnerability Details
Section dedicated to the Security Manager that delves into the details of the analysis.
Vulnerabilities and critical issues identified during the analysis are discussed in detail.

Remediation Plan
Document dedicated to the technical staff who will be responsible for repairing the vulnerabilities. The document suggests methodologies for removing the vulnerabilities identified during the analysis.