Cyber-Security

Ahieros mission is to provide information technology solutions today to make the best tomorrow.

Cyber-security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. Ahieros encompasses cyber-security from a holistic approach (360 degree protection spherical approach) utilizing information security best practices.

SECURITY FRAMEWORK

GUIDANCE, IT AUDITING AND (GRC)

Institute policies and procedures to ensure compliance with Basel, Blockchain, CMMI, CoBIT, DFARS (252.204-7012, etc.), DIACAP, FAA, FCC, FEMA 426, FEMA 428, FIPS (including FIPS 140-3, 199, 200, etc.), FISMA, FFIEC, GIG, GLBA, GISRA, HIPAA, HITRUST, ITIL, ISO 27000 series (e.g. ISO 20001, ISO 27002, ISO 27017, ISO 27018, etc.), NERC (CIP, BES Cyber Systems), NIST (e.g. 800-171, 800-53, NISTIR 8011) PMI, PCI, SAS-70, SSAE -16, SOX, WCO, RMF, eMASS, and other IT audit requirements.

NISTIR 8011 - Automation Support for Security Control Assessment

NERC Critical Infrastructure Protocols (CIP) for BES (Bulk Electric System) Cyber Systems.
ISO 27017 / 27018 - Cloud Security Best Practices

SECURITY ENGINEERING

  • Security Solutions Development Strategies
  • Expert implementation guidance with Business Continuity Planning/Disaster Recovery where solutioning close to 100% uptime
  • Security Automation
  • Identify, Analyze, Remediate, Implement, Review, Repeat (if necessary)
  • Advanced Remediation & Patching Solutioning
  • Expert InfoSec Consulting
  • SIEM Implementation Strategies
  • Security Architecture Strategy
  • Security Tools Implementation from multiple vendors

FEATURED SERVICES

Ahieros cyber-security services include, but are not limited to:

  • Information Security Policies
  • Organization of Information Security
  • Human Resource Security
  • Asset Management
  • Access Control
  • Cryptography
  • Physical and Environmental Security
  • Operational Security - procedures and responsibilities, Protection from malware, Backup, Logging and monitoring, Control of operational software, Technical vulnerability management and Information systems audit coordination
  • Communication Security - Network security management and Information transfer
  • System Acquisition, Development and Maintenance - Security requirements of information systems, Security in development and support processes and Test data
  • Supplier Relationships - Information security in supplier relationships and Supplier service delivery
  • Information Security Incident Management - Management of information security incidents and improvements
  • Compliance - Compliance with legal and contractual requirements and Information security reviews