- IS security
- Personal Data Protection Security Project
- Security Project for Technical Device Designed for Work with Classified Information
- Risk Analysis and CRAMM Risk Analysis
- Personal Security
- Business Continuity Management - BCM
- Business Impact Analysis - BIA
- Network Security
- Protection Against Malicious Code
- Security Incident Monitoring and Management
- Access Control
- Security Policy Enforcement
- Security Control Documents
- Technical and object security
- IT solutions
- SW solutions
Security Project for Technical Device Designed for Work
with Classified Information
Creation of classified information is permitted only using a certified technical device (TD). Certification of such technical device requires development of a Security Project, which is a document specifying the scope and manner of TD usage as well as means and methods for protection of classified information created, copied, otherwise duplicated, processed, transmitted, stored or archived on the TD.
The Security Project structure is defined in Article 58 of the Act No. 215/2004 Coll.. A follow-up Decree provides more detailed information regarding the Security Project contents.
No man is a prophet in his own house. Even in cases when a company has its own experts, the Security Project development is usually outsourced to another company.
On this count, our company will provide a view from outside and make its contribution by presenting new suggestions based on our knowledge of security technologies and of actual problems our clients are facing. Each Security Project involves a specification of security objectives and of combined measures, and is custom-made to fit your actual needs.
Our experts will prepare the Security Project in the following scope:
- Risk Analysis
- Security Architecture
- Security Manual
- Implementation Plan
The Project is prepared in line with the basic information system security rules, security standards, laws and international treaties binding upon the Slovak Republic. The Project also includes the implementation plan, which sets implementation priorities and specifies individual tasks, chronological order in which they occur and financial requirements. Before its delivery, the Project is discussed, and its aspects and consequences are explained in detail.
The importance of certain data types is accentuated by the special attention paid to them in the Slovak legislation. Such data types include personal data and data falling into the classified information category. Preparation of specific Security Projects is prescribed for the above-mentioned data types by law (Act No. 215/2004 Coll. on protection of classified information and Act No. 428/2002 Coll. on protection of personal data). In the course of preparing solutions to this type of Security Projects, basic procedures remain unchanged only some details are modified in order to align the procedures with the requirements of the above laws.
Our company as well as Security Projects authors have passed security clearance, and comply with the requirements laid down by law for security project development.