Compliance
In the context of the information systems security management, the company must comply with laws (eg Luxembourg law of August 2, 2002 on the protection of personal data), with safety standards (eg PCI, Sarbanes-Oxley Act, Basel II, ISO27001, …) with regulations (eg CSSF) and its own internal security policy.
dartalis proposes you solutions that allow you developing your tactics for working out the compliance of the information system security, implementing and ensuring its continued application in the daily life of the company.
Ensuring the monitoring of these activities by manual operations is not effective. Indeed, it is not possible to continuously follow manually and without tools the implementation of the security compliance of information systems on a daily basis. The amount of operational costs associated with these activities can be very high with very poor results.
dartalis proposes you organizational solutions and techniques to ensure effective development of the security of your information system while controlling costs associated with them.
Information Security Management
Activity objectives
- Comply with laws, regulations, internal security policy, standards, both from a technical standpoint as well as from an organizational standpoint
- Gain on the operational costs
- Automate audit and reporting
- Develop and market your security policy within your organization
Security Information and Events Management / Logs Centralisation
Activity objectives
- Being able to quickly detect security incidents
- Ability to conduct research and forensic
- Compliance with standards
- Compliance with security policies
- Be in possession of items that can be used as evidence in the event of legal action
- Be able to justify the cost avoidance due to the detection of incidents
Vulnerability Management
Activity objectives
- Check that the security measures put in place are effective
- Know the exposure of your IT infrastructure to face technical risks
- Detecting new vulnerabilities due to constant changes in information systems and emerging threats
- Prioritization of risks associated with the technical assets:
- Efficiency gains: it allows to prioritize activities effectively for your patch management activitiy
- Gain on operational costs
Database Security
Activity objectives
Databases often contain confidential data (from a legal perspective or high added value for the company). It is vital for a company to be able to secure highly in real-time information. dartalis helps you implementing a high level of security without impacting the work of your DBA and ensuring maximum stability of your databases.
Data Loss Prevention
Activity objectives
Information has become vital for a company. It is important to have a real visibility on the information communication flow within a company to be able to implement organizational security measures (classifying information, user awareness, working procedures) and technical measures to protect corporate information.
Privileged Access Control
Activity objectives
Having control and traceability of the activities performed on your IT systems with privileged accounts, particularly for remote connections.