The
Trellis Approach to security is completed in several phases
allowing the client control of resources expended in the
analysis.
Phase
1: Build Asset-Based Threat Profiles –
A team comprised of Trellis engineers and staff from the
client organization identify what is important to the
organization. (Information Related Assets) and what is
currently being done to protect those assets. This team
then consolidates the information, selecting those assets
which are most important to the company. (Critical Assets)
A threat profile for each asset is compiled identifying
the security requirements for that asset and the potential
threats to that asset.
Phase
2: Identify Infrastructure Vulnerabilities –
The analysis team looks at each Critical Asset, identifying
the IT systems and components associated with each. These
components are tested for weaknesses (Technology Vulnerabilities)
using a variety of tools.
Phase
3: Develop Security Strategy and Plans –
The analysis team creates a protection strategy and mitigation
plans for each of the Critical Assets. Trellis can assist
with the implementation of the mitigation plan or provide
a knowledge transfer at the clients discretion.
For More Information
On Trellis Security Services Please Call 800-745-0602