Improving information security in a complex and devolved environment is something that often can’t be achieved alone. The Information Security Team (IST) can support your division, department, faculty or college to review your information and IT security risks.
What we offer
The IST offers a bespoke security assessment service to provide assurance that your data and systems are appropriately protected from malicious attacks and accidental breaches.
Whether you’re concerned about the security of an entire college, department or faculty, the security impact of an ongoing project, or just need an independent set of eyes to ensure that changes haven’t had a detrimental impact on security, we will tailor our assessment to meet your requirements.
Bespoke assessments include on-site interviews with personnel and verification of security controls. The results are presented in a comprehensive report detailing risks and prioritised recommendations.
Benefits for you
Bespoke assessments tailored to your specific business requirements and drivers
Direct access to information security experts who understand the University context
Assurance that your department, team or project is working in accordance with information security best practices
Identifies vulnerabilities that could lead to information security incidents
Prioritised, actionable recommendations so you can plan for and implement tangible security improvements
Standardised tests based on industry-recognised best practices
Extremely cost-effective service compared with external consultancy services
How it works
The service is available to all parts of the collegiate university. Typically, assessments include:
Initial engagement and scoping
Comprehensive documentation review
On-site interviews with key stakeholders and personnel
On-site testing and verification of technical security controls
Comprehensive report detailing risks and prioritised recommendations
Executive summary for management of findings and recommendations
What you need to do
If you are interested in this service, or want more information, please contact us with a high-level description of your requirements and business drivers at grc@infosec.ox.ac.uk.
