Good information security policies are fundamental to and of paramount importance in protecting information assets. Orthus can conduct a comprehensive review of both business operations and systems, and write clear, concise and effective corporate, network and end user security policies to ensure the integrity of data.

Orthus experience and expertise is unsurpassed in developing and implementing:

• System access code of ethics
• System administration and privileged user policies
• Risk assessment requirements and risk classification schemes
• Control and system design guidelines
• Third-party connection requirements and agreements
• Reduced sign-on requirements
• Network segmentation / segregation policies
• Network, system and device activity logging
• Building and computer room access
• Visitor control and accountability
• Secure application design
• Development and commissioning processes
• System hardening standards
• Security patching / patch management programmes
• Change control programmes
• Security vulnerability assessment and penetration testing regimes
• Password policies
• Acceptable Usage policies
• Confidentiality and Non-disclosure agreements