Security & Risk Management

QCC's Security and Risk Management (SRM) team has a strong reputation across all areas of proactive and reactive security and risk management services including risk assessment, audit, testing and incident response.

SRM has experienced sustained growth in the past few years and continues to adapt and extend our knowledge to include the very latest security standards, processes and technologies. We are uniquely placed to help you to develop a clear strategy for your information security and operational initiatives and we take the time to understand clearly your organisation and your needs. Please find below a quick overview of our services; more detail can be found in the menus.

Risk Management
We provide assessment and analysis of risk exposure along with remediation advice utilising a variety of risk models depending on your organisational needs. We use OCTAVE, FAIR, Yo-Yo and HMG (UK Gov only) risk assessment methodologies and ISO 27001 and CObIT in support of our analyses and for standardisation in control recommendations.

Information Security Policy & Procedure Development
Extensive experience in assisting clients to develop corporate information security policies and associated procedures.

International Standards and Control Based Implementation
We have a strong background in control based standards implementation. Lead auditors for ISO 27001 and PCI Services we also have extensive knowledge in developing detailed security controls and procedures for environments using control based compliance frameworks such as COBIT, COSO and other standards.

Business Impact Analysis
Assisting clients to build a catalogue of threats and vulnerabilities relating to their business and the potential impacts.

Education and Training
Provision of Information Security training courses at locations throughout the UK. In particular, tailor-made security awareness training for management and staff.

Business Continuity & Disaster Recovery Planning
Assisting clients to plan for recovering business operations following a disruptions or disaster that might befall the client's business systems and resources.

Programme & Project Management
All SRM consultants have extensive project management skills for implementing projects or programmes based around information security.

Further and more specific information can be found in the menu but please click (here) to contact us or call us on 0207 353 9000 (option 4).