The pace of malicious-code development, denial-of-service attacks and the frequent discovery of new software vulnerabilities, mean that organisations cannot afford to be complacent about the effectiveness of their existing IT security infrastructure investment and the risks to their business,

Sopra Group has the expertise and knowledge to help our clients measure their network security, internal policies and processes and provide assurance on their adequacy.  Our security specialists provide a range of services that can identify security weaknesses and recommend remedial actions.  These services can be tailored to our clients' needs and applied individually or as part of a managed service.

The Application Penetration Test assesses the security of a web-based portal, e-commerce application, internal applications or Web platform to find application level security vulnerabilities.

Using a combination of manual techniques and commercial tools, this service pinpoints specific vulnerabilities and helps identify further underlying problems.  Our clients receive a detailed report that prioritises the issues  and that can feed into their risk-treatment process.

> MORE INFO

Sopra Group operates a team of security experts that is accredited by CESG to deliver information assurance testing services to UK Government departments and other public sector bodies under the IT Health Check Service, or CHECK scheme.  Developed to enhance the availability and quality of information assurance services that are provided to government, this scheme ensures that companies belonging to CHECK are measured against high standards.  This means that HMG and CNI customers can be assured that they will receive a high-quality service if the work is carried out under the Terms & Conditions of CHECK.

Sopra Group provides a range of penetration testing services, including social engineering tests, to assess security vulnerabilities and attempt to compromise our clients' security defences as a malicious attacker would.  These services show the degree of exposure to your network, infrastructure and database environments, from both an internal and external security perspective and provide assurance over existing security controls.

Mobile technologies present a major information security risk.  Sopra Group provides expert analysis of an organisation's wireless network implementation to determine if it is susceptible to attacks and provides recommendations of how to further enhance controls.

70% of malicious attacks now target application software rather than the underlying infrastructure.  Research has shown that software security code analysis is the most effective way of identifying and reducing application vulnerabilities.

Sopra Group provides rigorous and efficient source code inspection services that allow our consultants to work with our clients to identify detrimental software security problems at the onset or throughout the development lifecycle.

> MORE INFO

Our consultants can provide security audits of your systems and infrastructure against either industry-recognised standards or internal policies to identify non-compliant controls and to recommend remedial actions or solutions.  These services can be delivered as part of ongoing compliance requirements or as a pre-audit service, to assess readiness for internal or external audits.