Process Assessment:

• A review of your organization's IT security processes and related documentation selected from the following ten management areas: policy, organization, personnel, physical controls, asset classification and control, system access control, network and computer management, business continuity, application development and maintenance, and compliance
• An analysis of the information from interviews with key managers and process owners
• A final report of the strengths and weaknesses found with business-oriented recommendations for process changes that could improve the efficiency and effectiveness of your organization's security program