Bespoke security assessment

Improving information security in a complex and devolved environment is something that often can’t be achieved alone. The Information Security Team (IST) can support your division, department, faculty or college to review your information and IT security risks.

What we offer

The IST offers a bespoke security assessment service to provide assurance that your data and systems are appropriately protected from malicious attacks and accidental breaches.

Whether you’re concerned about the security of an entire college, department or faculty, the security impact of an ongoing project, or just need an independent set of eyes to ensure that changes haven’t had a detrimental impact on security, we will tailor our assessment to meet your requirements.

Bespoke assessments include on-site interviews with personnel and verification of security controls. The results are presented in a comprehensive report detailing risks and prioritised recommendations.

Benefits for you

  • Bespoke assessments tailored to your specific business requirements and drivers
  • Direct access to information security experts who understand the University context
  • Assurance that your department, team or project is working in accordance with information security best practices
  • Identifies vulnerabilities that could lead to information security incidents
  • Prioritised, actionable recommendations so you can plan for and implement tangible security improvements
  • Standardised tests based on industry-recognised best practices
  • Extremely cost-effective service compared with external consultancy services

How it works

The service is available to all parts of the collegiate university. Typically, assessments include:

  • Initial engagement and scoping
  • Comprehensive documentation review
  • On-site interviews with key stakeholders and personnel
  • On-site testing and verification of technical security controls
  • Comprehensive report detailing risks and prioritised recommendations
  • Executive summary for management of findings and recommendations

What you need to do

If you are interested in this service, or want more information, please contact us with a high-level description of your requirements and business drivers at grc@infosec.ox.ac.uk.