Risk Management

Astegic offers a number of enterprise risk management solutions. Key risk domains include technology risk management, information security and business continuity. We provide the methodologies, templates and techniques for Independent Assessments, Program Improvement, Policy and Plan Development, and ongoing support services.

With a growing number of legal and regulatory requirements--such as the Gramm Leach Bliley Act, the Sarbanes Oxley Act, HIPAA, and California Privacy Laws (including SB-1436), and industry-specific requirements such as the Payment Card Industry (PCI)--the challenge to secure information and comply with regulatory measures is enormous. With so many highly-visible security breaches in the last two years (computer tapes lost, consumer identities compromised, etc.), consumers are demanding that their information be secure, and their privacy protected. Astegic’s information security solutions include tailored assessments and programs tailored to regulatory compliance requirements.

In addition to information security, Astegic has business continuity programs designed to ensure continued operations when these business functions are at risk.

Astegic's methodology and facilitation experience can help organizations put the necessary plans in place—including training exercises and maintenance processes—to ensure your organization is prepared to respond to natural or man-made threats.

Solution Areas

Solutions

 

Enterprise Risk Management

Corporate Risk Management Program

Supplier Risk Management Program

Information Security

Information Security Assessments

Information Security Program Improvement

Information Security Policy Development

Virtual Information Security Officer

Business Continuity

Business Continuity Assessments

Business Continuity Program Improvement

Business Continuity Plan Development

Virtual Business Continuity Professional