One of the few companies in India to focus exclusively on End-End Information Security solutions and services for IT and OT
ASSESS
DESIGN
IMPLEMENT
OPERATE
Risk Assessment for ICS
Risk-Based Vulnerability Assessment
Advanced Penetration Test
Application & Web Application Penetration Testing
Network Penetration Testing
Access Control / Policies & Procedures
Business Impact Assessment
Information Security Framework — ISO 27001
Statutory Compliance
IT-OT Integration review
Configuration Review
ICS Component Assessment
Network Architecture
Data Security
Data Loss Prevention
End Point Security
Mobile Device Management “MDM”
Application & Database Security
Identity & Privileged Access Management
Security Operation Centre “SOC”
Cloud Security
Anti-Virus & Anti-Malware
Disaster Recovery & Business Continuity
Policy & Procedure Rollout
Patch Management
Security Operation Centre
Messaging Security
Security Information Management Systems
Cloud Security
NIST, ISA, ANSI
Data Loss Prevention
Identity & Access Management
SOC Operation for continuous monitoring
Incident Management
Breach Response
Security SLA Management & Reporting
User Access Management & Provisioning
Disaster Recovery & Business Continuity
Security Awareness Training
Policy Management
Information Security — Strategic Staffing
STANDARDS FOR THE ICS ASSESSMENT
IARM Information Security Team shall conduct the assessment using the following standards wherever applicable: –
Penetration Testing Execution Standard (PTES)
NIST Special Publications 800-115 Technical Guide to Information Security Testing and Assessment
Open Source Security Testing Methodology Manual (OSSTMM)
Information Systems Security Assessment Framework (ISSAF)
Industrial Network and Systems Security (IEC 62443, ISA/99)
Guide to Industrial Control Systems (ICS) Security (NIST SP800-82)
Web Application Security Consortium (WASC) Threat Classification
Open Web Application Security Project (OWASP) Testing Guide
Center for Internet Security (CIS) standards
Common Vulnerability Scoring System (CVSS)
Why IARM?
IARM test cases consist of 300+ Checks
65% of test cases are manual test
100% mitigation guidance
Major industry Standard compliance coverage like ISA99, NIST, DWS, ANSI etc.,
Experienced professional in ICS and cybersecurity
Our Customer
One of the well-known business group in India, having their thermal plant in Tamilnadu has chosen IARM to conduct Cyber Security testing for their Plant systems for 3 years. Critical vulnerabilities identified and fixed
IARM has performed Embedded System testing for leading IOT based solution company which does water and plumbing management for apartments and corporate offices
