Security Assessments

Security Assessments Information security assessments benefit companies by focusing management on areas where reputation and strategic risk can be reduced.  Understanding risk requires the analysis of a wide range of information relevant to a particular company’s risk environment.   IRG’s holistic assessment methodologies are based on the years of experience our employees have working with large financial institutions and major accounting firms.  An annual security assessment should be considered an essential metric of every company's ongoing security strategy.  Information Risk Group LLC has developed several services based on the needs and requests of our customers:

• Customized Security Program Development / Risk Analysis
• GLBA Security Assessments
• HIPAA Privacy / Security Assessments
• Information Security Policy and Standard Reviews
• Vulnerability and Penetration Testing (Ethical Hacking)

All reviews are performed in an efficient and timely manner in order to minimize any impact on your company and its personnel.  As independent examiners of your company’s overall security strategy, IRG is in a position to offer impartial reporting on the effectiveness of a company’s information security implementation. 

Please contact one of our IS specialists to discuss which type of assessment is appropriate for your company.

Customized Security Program Development

Starting from the beginning is a daunting task, but every journey begins with the first step.  IRG has developed a customizable approach that will provide your company with a focused methodology for implementing a security program.  The first steps involve our information security specialist in coordination with your staff performing a quantitative and qualitative risk analysis using the following 6 steps:

1. Gather data and assign monetary value to your company's information and technology assets.
2. Estimate the vulnerabilities and threats to those assets
3. Evaluate the effectiveness of existing security controls and processes
4. Derive the probability of impact and overall loss potential per threat
5. Interview management and senior technical personnel
6. Develop recommendations to transfer, reduce, assign, or accept risk

The results of this evaluation will allow your company to control and manage risk based on data and analysis which more accurately reflect the risk and threats within your environment.  IRG can then aid your company's information security personnel in recommending appropriate safeguards, countermeasures, and actions. 

Please contact us with any questions you may have on this subject or any other service Information Risk Group offers.

Information Risk Group LLC
3220 Henderson Blvd.
Tampa, FL 33609

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Information Risk Group offers information security and risk management services to companies throughout the Americas.