Implementation2018-10-09T13:17:43+00:00

Implementation

Texaport’s project team work with clients to implement changes recommended during Cyber Security investigations.

Implementation of Cyber Security recommendations

Implementations in relation to Cyber Security will normally follow the report phase, where the client will decide on the course of action and security posture to be achieved. Outside of this process, Texaport can implement Cyber Security changes for clients as a stand alone project or as an element of our “Holistic Security” package.

The implementation phase is the core of compliance as any non-conformances discovered during the audit phase will have recommended actions to rectify.

These elements can involve third parties and inter-departmental action being necessary including:

  • Policies
  • Software deployment
  • Hardware Upgrades
  • Legal Disclaimers
  • Processes
  • Technical Engineering

Hardware Upgrades

Texaport advises clients to implement a “rolling replacement” cycle into organisations to anticipate refresh cycles and prepare budgets accordingly.

Where this has not been implemented previously can be highlighted during the Cyber Security process, requiring hardware upgrades, replacements or refreshes.

Software Deployment

Most Cyber Security engagements with Texaport will result in one or more software agents being deployed on client machines either for compliance, security or reinforcement of policies.

The most common software deployment is for anti-malware or password management software to secure client devices and access.

Policy Work

One of the biggest weaknesses in Security posture for clients can be their employees and policies. Ensuring that companies have the required policies in place throughout the business is important for many standards including Cyber Essentials and GDPR compliance.

Common policies we have assisted to implement are: Acceptable IT Use and Privacy policies.

Disclaimers and Statements

Some policies require additional disclaimers or statements to be made by the company publicly such as the Privacy policy, which can include the company’s position in relation to Personally Identifiable Information under the GDPR.

Texaport work with clients’ HR and Legal teams or third parties to ensure a consistent, acceptable approach to these.

Process Work

Deciding on company policies and making public statements on the company’s position are essential in many cases, but worthless if the organisation does not reinforce policies with processes.

Processes will also help clients adhere to the standards which they have achieved or are working towards, providing a clear step by step guide for employees, contractors and third-party organisations.

Technical Engineering

Along side purchases and implementations, policy work and processes an element of technical engineering is usually required to achieve compliance or improve the Cyber Security posture of a client organisation.

This could be locking down user access, securing the network and company services or more technical work depending on the recommendations of the report.

Scope

Audit

Report

Implement

Review