Our risk management methodology entails accurate identification and analysis of threats facing a company or agency’s information technology assets, and the vulnerabilities most likely to be exploited. Consideration is given to both technical (e.g. software configuration) and non-technical (e.g. physical and procedural) risks. We provide recommended steps (safeguards or countermeasures) to mitigate identified risks.

Findings are presented in a form that is suitable for management decision-making, yet complete enough to serve as a guide for remedial action.

BAI also offers these other information security consulting services. Click on the links below for details:

      Security Policy Development
      Security Engineering
      Security Avareness and Training
      Security Testing and Evaluation
      Risk Management
      Certification and Accreditation

Return to BAI home page

© 2003 Berman Associates, Inc.