The Vistorm approach is to encourage our clients’ security teams to take a step back and consider a broad, top-down view of information security. This involves looking at the risks that their organisation is facing, rather than the threats.
We believe that if organisations can understand and manage five key business challenges then they will be well on their way to reducing their overall costs and risk. These specific challenges are:
Business Interruption: The risk of employees not having access to the services they need to do their jobs.
Unsound transactions: Ensuring the integrity and validity of all data flowing around the organisation.
Unwanted disclosure (e.g. data loss): Ensuring that critical information is not breached – maliciously or accidentally.
Compliance Infringement: The increasing number of regulations across different sectors and the consequences of not complying have meant that compliance is now one of the biggest drivers of information security initiatives.
Identity and privilege abuse: Employees need access to information and systems to perform their roles. However the degree of access needs to be sufficient and not open to abuse.
We have linked these challenges to the C-level concerns of any organisation and, more importantly, to our five core capabilities – Business Continuity & Recovery, Infrastructure Security, Data Protection & Privacy, Governance Risk & Compliance and Identity & Access Management.