PKI
Auditing
CyberQ is one of the empanelled auditors for the Controller of
Certifying Authorities (CCA) in India. The CCA is the root CA in
India and is the controlling authority to which any organization
aspiring to become a licensed CA applies for a license. The CCA
sends an auditor to the company's premises and based on the
auditor's report, decides if the license to operate as a CA is to
be given or not. This audit is referred to as the Pre Operative
Audit. It is an intensive audit where the company's compliance to
the IT Act, 2000 is verified. Unlike an ISO audit or a CMM
assessment, which looks at only the processes and hence is a
process audit, a pre operative audit has to audit not only the
processes, but the technical product and the physical setup of the
company in terms of security.
Consulting
CyberQ provides consultancy and support to companies for setting
up security controls. We have extensive experience in helping
organizations set up processes for quality based on the ISO 9001
and CMM model. We carry forward our experience here in helping
organizations set up processes to implement security controls.
These include the Security Policy, Roles and Responsibilities,
Access Control, Configuration Management, System Administration
procedures etc. We also help in implementing technical security
controls like firewalls, IDS. |