CREATING INNOVATIVE SECURITY

TECHNICAL ASSESSMENT OR PRE-AUDIT

FTR Solutions will conduct a simulated regulatory assessment or pre-audit of technical and organisational security controls. The aim of the service is to highlight issues that might be identified in a regulatory audit or investigation, but to do so in a safe, confidential environment.

​

FTR Solutions has unique experience conducting audits of this type for organisations of all sizes, up to and including the largest global multinationals.

INCIDENT RESPONSE ANALYSIS

The ability of an organisation to effectively detect and respond to security incidents is essential to demonstrating that appropriate technical and organisational security controls are in place.

FTR Solutions will analyse an organisation’s incident response capability, determine the extent to which it is likely to match regulatory expectations and, if appropriate, make recommendations for how incident response policy and organisation can be improved.

DATA BREACH INVESTIGATION AND ANALYSIS

Data breaches inevitably arise and, in some cases, these data breaches will lead to regulatory investigations. FTR Solutions will conduct an investigation into a specific data breach, identify root causes and make recommendations for remediation.

In cases where a regulatory investigation has been initiated this service can help anticipate and prepare for potential findings. Acting on the outcome of such an investigation can help to advance arguments for mitigation of regulatory action.

PREPARATION FOR REGULATORY AUDIT OR INVESTIGATION

Large organisations often have difficulty demonstrating all of the good security work that they do. FTR Solutions will help an organisation align their technical and organisational security controls with regulatory expectations.

​

This is achieved by identifying and organising available technical and legal material and making recommendations arising from analysis of the material. This service also provides the organisation with an opportunity to identify in advance technical and organisational gaps that the regulator might focus on.