Digital Trust &
Cybersecurity

ISDT designs and implements risk-based Information Security Management Systems, including context assessment, asset and risk management, risk treatment, Statement of Applicability, security policies, controls, internal audit and certification readiness.

What We Do

• ISMS scope
• Information-security risk assessment
• Asset management
• Risk treatment
• Statement of Applicability
• Policies and controls
• Internal audit
• Management review
• Certification readiness

ISDT develops cybersecurity governance structures that define accountability, oversight and decision-making, covering roles, policies, risk oversight, security controls, performance indicators, incident governance and management reporting.

What We Do

• Cyber governance framework
• Roles and RACI
• Security policies
• Risk oversight
• Control ownership
• Security KPIs/KRIs
• Management reporting

ISDT identifies information and cyber risks, evaluates threats, vulnerabilities, business impacts and existing controls, and develops prioritized risk-treatment plans aligned with business impact and risk appetite.

What We Do

• Threat and vulnerability evaluation
• Business impact assessment
• Existing control assessment
• Prioritized risk treatment

Deliverables

• Cyber Risk Register
• Risk Assessment
• Treatment Plan
• Control Recommendations
• Executive Risk Dashboard

ISDT uses NIST CSF 2.0 and other recognized frameworks to evaluate current cybersecurity capabilities, identify maturity gaps and develop practical improvement roadmaps, helping organizations understand their current maturity and where to improve.

What We Do

• Current capability assessment
• Maturity gap identification
• Practical improvement roadmap

ISDT supports privacy governance, data mapping, privacy risk assessments, policies, responsibilities and controls aligned with applicable privacy legislation, GDPR principles and ISO privacy frameworks.

What We Do

• Data mapping
• Privacy risk assessment
• Privacy policies
• Roles and responsibilities
• Third-party considerations
• Privacy controls
• Compliance assessments

ISDT helps organizations establish governance, risk and security controls for cloud environments aligned with shared-responsibility models, including risk assessment, supplier controls, data protection and alignment with ISO/IEC 27017 and ISO/IEC 27018.

What We Do

• Cloud risk assessment
• Shared-responsibility models
• Supplier controls
• Data protection
• ISO/IEC 27017 and 27018 alignment

ISDT aligns IT governance and service management with business objectives using COBIT, ISO/IEC 20000-1 and related frameworks, covering IT controls, service governance, change, incidents, suppliers, performance and technology risk.

What We Do

• Service management
• Change management
• Incident management
• Supplier management
• Performance management
• IT controls
• Technology risk

ISDT helps organizations prepare to respond to and recover from cyber incidents through response governance, escalation processes, business continuity integration, exercises, lessons learned and improvement planning.

What We Do

• Incident governance
• Escalation processes
• Response procedures
• Continuity integration
• Simulations and tabletop exercises
• Lessons learned