The part of the document's content:
......net Archive. Yahoo! is not affiliated with the authors of this page or responsible for its content. Compliance & Standards MANAGE RISK The growing number of laws and standards for security and
privacy has led to a convergence of overlapping control
requirements and has created cumbersome compliance
responsibilities. Forsythe keeps you ahead of this ever-
changing regulatory curve. We'll help you determine the
security solutions and controls needed to mitigate
operational risk in the context of the standards and
regulatory issues that impact your operating environment. Be Ready Forsythe's comprehensive security services help you to
ensure audit-readiness for security and privacy related
government regulations, utilizing audit-friendly baselines
such as ISO 17799 / 27001, COBIT, and NIST. As a PCI
Authorized Scanning Vendor (ASV) and Qualified Security
Assessor (QSA), we help you meet PCI compliance
requirements. Alternatively, we can help you with
pre- or post- PCI audit activities. And, we'll assist with
security event and incident management (SEIM) planning. Your compliance strategy must take into account the
unique security and privacy profile of your organization.
Each company's response to laws and standards will be
different. Forsythe will help you to identify the reasonable
and appropriate level of compliance for your enterprise. The Forsythe Approach Forsythe's experienced security and compliance team will
establish an overview of your existing information security
program. We'll collect and inventory policies and
procedures, evaluate your administrative, technical, and
physical security posture, and match findings against
industry-specific regulatory requirements and standards,
such as Sarbanes-Oxley, GLBA, HIPAA, ISO and PCI. Forsythe provides recommendations and actionable steps
for achieving and maintaining compliance in key areas,
including privacy, data classification and retention and
incident management. We will work closely with you to accomplish your security
and compliance goals with the recognition that they are a
small part of a bigger picture--your company's strategic
business objectives and long-term plans. Stay Ahead of the Curve Regulatory and industry compliance requirements have helped to shine a light on the role of information security throughout the organization. In today's increasingly regulated business environment, you need to ensure that your enterprise meets the compliance expectations of regulatory bodies, auditors, partners, and customers. Forsythes Compliance & Standards solutions facilitate your alignment with legislation such as HIPAA, SOX, and GLBA, and industry standards such as PCI, ISO, COBIT and NIST. We work with you to develop a solid compliance posture for your enterprise. MANAGE RISK Information Security Solutions Compliance & Standards At a Glance: Understand your company's current
compliance posture. Develop a plan that meets the requirements
of industry standards and government
regulations and is tailored to your
environment and business objectives. Facilitate audit-readiness. Get the Forsythe Advantage. For more than 35 years, Forsythe has delivered forward-thinking advice, technology, and operation-enhancing solutions. As an
independent advisor, Forsythe can help you address every aspect of your infrastructure, including how new solutions may
affect the bigger picture. Working with every major provider, Forsythe acts as your single point of contact for managing the
cost, effectiveness, and risk related to your information systems. Let Forsythe Help. Business objectives and business issues dont exist in a vacuum. Forsythe identifies and addresses IT
interdependencies to deliver solutions that work across your enterprise. Call us today. 7770 Frontage Road, Skokie, Illinois 60077 I 800-843-4488 I www.forsythe.com © 2007 Forsythe Solutions Group, Inc. All Rights Reserved. Contents may not be reproduced, in part or in whole, without prior written permission from Forsythe. 1/08 Forsythes Core Competencies and Offerings for Compliance and Standards Advisory Services
Forsythe allows you to develop a security strategy that
identifies security requirements and technical vulnerabilities,
documents policies and standards, and is aligned with industry
and compliance mandates. Forsythe is an authorized Payment Card Industry (PCI) Data
Security Standard vendor, and is qualified to perform authorized
network scans (Authorized Scanning Vendor) and security
audits (Qualified Security Assessor) required by this standard.
In addition, we are CIPP, CISSP, CISM, and CISA certified. Security and Compliance Roadmap
PCI Services
Standards Gap Analysis--ISO, COBIT, NIST
Regulatory Gap Analysis--HIPAA, GLBA, SOX
Information Security Policy--Review and Development
Information Security Strategy--Framework, Controls) Architectural Services
Forsythe analyzes your security architecture to determine your
current security state, understand your infrastructure requirements
and needs, and provide appropriate recommendations to either
improve upon or deploy new security controls. Security Architecture and Controls Analysis
SEIM Gap Analysis
Log Management Analysis
Patch Management Gap Analysis
Vulnerability Management Gap Analysis Procurement & Fulfillment
Forsythe's strong network of partner relationships and our
vendor-independent approach mean that you receive the very
best security solution to support your business goals. Forsythe's strong industry partner relationships include over 75 security vendors Implementation & Integration
Forsythe's staff of fully-certified product specialists and solution
architects implements the solutions that address your security
needs. We provide you with a single point of contact for
technology evaluation, acquisition, and deployment. In addition,
we help you manage your IT acquisitions and infrastructure,
including financing and portfolio management. Security Event and Information Management
Log Management
Patch Management
Vulnerability Management & Intelligence
Risk Assessment Tools Security Training & Education
Security training and education are an integral part of your
security program. Forsythe's educational offerings can be
tailored to your organization and delivered independent of a
technology implementation. Classes can be held at our
Authorized Training Centers, or onsite at your organization. Security Awareness Training
PCI Training
Comprehensive Security Product Training
Authorized Training Center for Checkpoint, Citrix, and Nokia
Training Provider for Other Security Partners
Training Locations in the US and Canada