Get A Quote

You selected PCI ASV Scan Service

What is the scope of your ASV Scan?

How many external IP addresses need to be scanned?

Do you currently have any firewalls or security devices in place that might affect the scan results?

If yes provide details:

Have you conducted an ASV Scan before?

What is the timeline or frequency for conducting ASV scans?

Do you need assistance with remediation if vulnerabilities are identified during the scan?

Is your IT infrastructure hosted on-premises, in the cloud, or a combination of both

You selected ISO27001:2022 Compliance Readiness Service

Do you currently have an Information Security Management System (ISMS) in place?

What is the scope of your ISO 27001:2022 certification?

Have you conducted any prior gap analysis or assessments related to ISO 27001:2022?

If yes, please provide details:

Which areas of your organization will be included in the compliance readiness assessment?

What is your preferred timeline for achieving ISO 27001:2022 compliance?

Do you have dedicated personnel for information security, or do you need assistance with building a team for compliance?

Do you use external vendors for IT services, and if so, how do you manage their compliance with your security policies?

Are you looking for support only for the readiness phase, or do you require ongoing support during and after the certification process?

Is your IT infrastructure on-premises, in the cloud, or a hybrid environment?

Who will be the point of contact for coordinating the ISO 27001:2022 compliance readiness process?

You selected ISO27701:2019 Compliance Readiness Service

Do you currently have an ISO 27001 certification or an Information Security Management System (ISMS) in place?

What is the scope of your ISO 27701:2019 certification?

What types of personal data do you process?

Which privacy laws and regulations are applicable to your organization?

Have you conducted a privacy impact assessment (PIA) or data protection impact assessment (DPIA) before?

Do you have a dedicated Data Protection Officer (DPO) or privacy team in your organization?

Do you require assistance in implementing both ISO 27001 and ISO 27701 simultaneously, or is ISO 27701 the primary focus?

Do you need assistance with creating or updating privacy policies and procedures to align with ISO 27701 requirements?

What is your preferred timeline for achieving ISO 27701:2019 compliance?

Are you looking for support only during the readiness phase, or do you require ongoing support during and after the certification process?

Who will be the point of contact for coordinating the ISO 27701:2019 compliance readiness process?

You selected Vulnerability Assessment and Penetration Testing (VAPT) Service

What is the scope of the VAPT?

How many assets (e.g., IP addresses, applications, servers) will be included in the VAPT?

Have you conducted a VAPT before?

If yes, when was it conducted?

What is your objective for this VAPT?

Are there any compliance requirements driving the VAPT?

Do you have a defined testing environment (e.g., production, staging) where the test will be conducted?

Other (please specify)

Will there be any restricted hours or downtime windows when the VAPT should or should not take place?

If yes, please specify

You selected Social Engineering Service

What type of social engineering assessment are you interested in? (Select all that apply)

What is the primary goal of the social engineering assessment?

How many employees will be included in the social engineering test?

Do you have a preferred method for notifying employees about the assessment after the test?

What is your preferred time frame for conducting the social engineering assessment?

Will any third-party vendors be included in the social engineering test?

You selected Firewall Configuration Review

What type of firewall(s) are currently deployed in your network?

How many firewalls are to be included in the review?

Do you have any specific firewall policies or rules that should be reviewed?

Are there compliance requirements (e.g., PCI DSS) driving this firewall review?

Have there been any recent firewall changes or incidents that triggered this review?

Do you have logging and monitoring enabled for firewall activities?

Who will be the point of contact for coordinating this firewall review?

You selected Application Security Assessment

What type of application(s) need to be assessed (e.g., web, mobile, cloud)?

How many applications are in scope for this assessment?

Are there any known vulnerabilities or concerns about the application(s)?

Do you need the assessment for compliance with a specific standard (e.g., PCI, SOC 2)?

Is the application in production or development?

Has the application undergone previous security assessments?

Who will be the point of contact for coordinating the assessment?

You selected Secure Code Review

What programming languages and frameworks are used in your application(s)?

How many lines of code or modules are in scope for the secure code review?

Have there been any previous security vulnerabilities identified in your code?

What is the primary objective of the secure code review

Are there specific areas of code or modules that require special focus?

Is your codebase version-controlled, and can we access it for the review?

Who will be the point of contact for this review?

You selected Threat Intelligence

What specific types of threats are you most concerned about (e.g., phishing, ransomware, insider threats)?

What is the size and scope of your IT environment for threat monitoring?

Do you currently have any threat intelligence tools or services in place?

Are there any compliance requirements driving your need for threat intelligence services?

How do you plan to use threat intelligence?

What regions or industries do you operate in that might be targeted?

Who will be the point of contact for coordinating threat intelligence services?

You selected GDPR Compliance

Have you already implemented any GDPR compliance measures?

What types of personal data are processed by your organization?

Do you have a Data Protection Officer (DPO) or equivalent in your organization?

Do you need assistance with data subject access requests (DSARs) and breach notifications?

Are there any specific areas of GDPR compliance you are most concerned about?

Do you need assistance in mapping and classifying personal data?

Who will be the point of contact for GDPR compliance coordination?

You selected Data Protection Assessment

What types of sensitive data does your organization handle (e.g., customer, employee, financial)?

Do you have a formal data protection policy in place?

Has your organization experienced any data breaches in the past 12 months?

Are third-party vendors involved in the handling of your sensitive data?

What are your primary concerns regarding data protection?

What data protection regulations or standards are you subject to (e.g., GDPR, HIPAA)?

Who will be the point of contact for this data protection assessment?

You selected HIPAA Compliance Readiness

What types of protected health information (PHI) do you process or store?

Do you already have HIPAA policies and procedures in place?

Have you experienced any HIPAA-related incidents or breaches?

Do you use third-party vendors that handle PHI, and are they HIPAA-compliant?

What is the size and complexity of your in-scope IT infrastructure? (e.g., number of servers, network complexity, cloud vs. on-premises)

How many applications are in scope for HIPAA audit?

You selected Bahrain Personal Data Protection Law Compliance Readiness

Have you previously conducted a gap analysis for Bahrain PDPL compliance?

What types of personal data do you process in Bahrain?

Do you have a data privacy policy in place specific to Bahrain’s PDPL?

Do you require assistance with data subject rights under the Bahrain PDPL?

Have you mapped out data flows involving Bahrain-based individuals?

Do you need guidance on breach reporting under Bahrain PDPL?

Who will be the point of contact for Bahrain PDPL compliance readiness?

You selected vCISO Service

What are the primary goals for engaging a vCISO in your organization?

What compliance frameworks or security standards are you currently adhering to or aiming to comply with?

What is the current state of your information security program?

What are the most critical areas of security that need immediate attention?

Do you already have internal security staff, and how will the vCISO collaborate with them?

What tools and systems are currently in use for security management (e.g., SIEM, vulnerability management tools, endpoint protection)? Please list the tools and their purpose.

What are the primary cybersecurity threats or risks you are concerned about?

You selected Risk Assessment

What is the scope of the risk assessment (e.g., entire organization, specific departments, IT infrastructure)?

Have you conducted previous risk assessments, and what were the findings?

What types of risks are your primary concern?

Do you need the risk assessment for a specific compliance framework?

How many systems, applications, or business processes are included in this assessment?

What risk management processes do you currently have in place?

Who will be the point of contact for coordinating the risk assessment?

You selected SOC 2 Type I and II Compliance Readiness

Have you previously undergone a SOC 2 audit, and if so, which type?

What trust service categories do you want to include (e.g., Security, Availability, Confidentiality)?

Are there any known gaps in your current controls that would affect SOC 2 compliance?

Do you already have documentation for your security policies and procedures?

What is your target timeline for completing the SOC 2 Type I/II audit?

What is your preferred timeline for achieving SOC2 compliance? (e.g., 3 months, 6 months, 12 months)

You selected NIST Maturity Assessment

Have you previously assessed your organization’s maturity against the NIST framework?

Which NIST framework are you focusing on (e.g., NIST CSF, NIST 800-53)?

Are there any specific areas of the NIST framework you are most concerned with (e.g., incident response, risk management)?

Do you need assistance with implementing recommendations from the maturity assessment?

What is the scope of your NIST maturity assessment (e.g., entire organization, specific departments)?

What is your current maturity level based on your internal assessment?

Who will be the point of contact for coordinating the NIST maturity assessment?

You selected CIS Assessment

Are you currently following any of the CIS controls (e.g., CIS Controls v8)?

What is the scope of the CIS assessment (e.g., entire organization, specific departments)?

Do you have any known security gaps or areas of concern that align with the CIS controls?

Who will be the point of contact for the CIS assessment?

You selected Business Continuity Assessment

Do you currently have a Business Continuity Plan (BCP) in place?

What is the scope of the business continuity assessment (e.g., entire organization, critical systems)?

Have you conducted any BCP tests or drills in the past 12 months?

Do you have third-party dependencies that are crucial for your business continuity?

Number

What are the most critical processes or systems that must be assessed?

Are there any specific compliance requirements (e.g., ISO 22301) driving this assessment?

Who will be the point of contact for coordinating the business continuity assessment?

You selected Disaster Recovery Assessment

Do you have a Disaster Recovery Plan (DRP) in place?

Have you tested your disaster recovery plan within the past year?

What systems or applications are critical to your organization’s recovery?

What is your current Recovery Time Objective (RTO) and Recovery Point Objective (RPO)?

Would you like real-time alerts or scheduled reports for security events?

Do you require assistance in identifying gaps in your DRP?

What is the scope of the disaster recovery assessment (e.g., entire infrastructure, specific systems)?

Who will be the point of contact for coordinating the disaster recovery assessment?

Do you require compliance reporting (e.g., GDPR, HIPAA, PCI DSS) with your SIEM solution?

You selected Internal Audit

What is the scope of the internal audit (e.g., IT systems, business processes, financial controls)?

Do you have internal audit policies and procedures currently in place?

Do you need ongoing support for audit preparation and remediation?

Are there specific compliance frameworks driving this internal audit (e.g., ISO 27001, SOC 2)?

How many departments or systems are included in this audit?

Who will be the point of contact for coordinating the internal audit?

You selected Antivirus Implementation and Management

What is the size of your organization (number of devices to be protected)?

Are you currently using any antivirus solution?

Do you require 24/7 monitoring and management of your antivirus system?

Are there any specific threats or malware types you want to prioritize for protection?

You selected SIEM Implementation and Management

How many systems, applications, and network devices need to be integrated into the SIEM solution?

Do you require compliance reporting (e.g., GDPR, HIPAA, PCI DSS) with your SIEM solution?

Would you like real-time alerts or scheduled reports for security events?

What is your preferred method of incident management (automated, manual, or a mix)?

You selected Access Management Tool Implementation and Management

How many users and systems need to be included in the access management solution?

Do you require role-based access control (RBAC) and multi-factor authentication (MFA) for all users?

Are there any specific compliance standards (such as GDPR, HIPAA) you need the solution to meet?

Would you like us to conduct periodic audits and provide detailed access reports?

You selected Firewall Implementation and Management

What is the size and complexity of your network infrastructure (number of devices, locations, etc.)?

Do you have any specific security policies or requirements for your firewall solution (e.g., traffic filtering, VPN support)?

Are you interested in proactive monitoring and alerts for suspicious network activities?

Would you like ongoing support and maintenance for firewall firmware updates and rule changes?

You selected PCI DSS SAQ Compliance

You selected PCI ROC Compliance Service