Sam Raincock Consultancy provides IT security consultancy services  specialising in incident/non-compliance investigations and implementing effective security procedures.  SRC believes that security is not necessarily about complicated and expensive systems and for most organisations such things are unrealistic.  Security starts with making small progressive changes which can help manage and prioritise the risks to your business or plan to prevent problems which have previously occurred.           Sam has a strong interest in the breadth of the IT security view, however, she specialises in forensics (and preventing issues in corporate environments), policy assessment and internal auditing up to and including ISO 27001 (an information security management system), social engineering and the effective use of encryption.

 Sam can provide security assessments for legal cases.  Often these involve assessing procedures to determine if it is possible to attribute particular actions to person(s).  In previous cases, this has involved Sam evaluating the security procedures of a number of large organisations.

SRC can assist you in providing confidential internal investigations into security breaches, including comprehensive assessments of how the breach occurred and identify the issues in your current systems and procedures.  Where required.  Sam can also provide expert witness statements and testimony which could be used in mediation, civil or criminal proceedings.    

In summary, SRC can provide you with the following services:

• ISO 27001 implementation and evaluation.
• Investigations when things go wrong – misuse of data including intellectual property theft or computer misuse.
• Assessing current business security procedures, providing GAP analysis and highlighting areas of weakness and high risks.  Devising security policies for organisations with no current procedures.
• Devising simple systems for securely transporting data.
• Recovering data and devising simple but effective backup procedures.
• Testing security policies, including establishing if users are adhering to your current polices and procedures and social engineering testing.
• SRC can be part of your security incident reponse procedure providing immediate advice in the event an IT incident is discovered.

For free confidential advice about security and your business or to arrange a free initial face-to-face consultation (within the North East area) please contact SRC.