Secure Architecture Review (SAR)
Specialist services to protect your business
The purpose of the Secure Architecture Review service is to assess the current state of security on IT infrastructures and correct any defects.
The ISGroup team has extensive experience when it comes to complex infrastructures.
The team of experts, having worked in the field for many years, has vast expertise covering many technologies in the fields of networks, cloud, or custom projects.
Drawing on this expertise, the team highlights known weaknesses in the architecture and suggests corrective measures to reduce its exposure to attacks.The ISGroup Secure Architecture Review service is divided into three main steps:
Starting from the documentation regarding the design and development of the infrastructure, ISGroup will evaluate the design choices. By opening a dialogue with analysts, developers, and/or technical staff who created the application, the team of experts will be able to discover design flaws and document them.
Based on the results of the preliminary analysis, the team of experts will assess the potential impact that the identified issues may cause.
In this phase, specific exploits for the infrastructure will be considered, and their results will be evaluated to study the impact they could have on the company.
All steps and issues will be documented and delivered to the client professionally. Improvements or corrections will also be proposed to make the infrastructure more secure.
Given the team's experience, ISGroup will be able to evaluate numerous aspects of the architecture to discover critical issues.
Depending on the type of infrastructure being worked on, the team will be able to focus on aspects that typically lead to security issues. The review also examines:
SDCL
Code Quality
Testing Routines
Authentication
Authorization
Encryption Used
Web Server
Database
Firewall (Web or Network)
The report describes the identified vulnerabilities and critical issues, the risks they create for the company, and the recommended architectural corrections to mitigate them.
You will receive a report divided into three areas.
High-level summary of the security of the analyzed infrastructure. This document does not go into technical details but rather offers an overview understandable by non-technical personnel.
Section dedicated to the Security Manager that delves into the details of the analysis. Vulnerabilities and critical issues identified during the analysis are discussed in detail.
Document dedicated to the technical staff who will be responsible for repairing the vulnerabilities. The document suggests methodologies for removing the vulnerabilities identified during the analysis.
ISGroup's Secure Architecture Review assesses the security of an IT infrastructure's architecture and proposes fixes for the issues it identifies. It covers network architectures, cloud environments and custom projects.
A Secure Architecture Review requires the infrastructure design documentation and discussions with those who built it: analysts, developers or technical staff. On this basis ISGroup assesses the design choices.
A Secure Architecture Review usually has three stages: a preliminary analysis of the design choices, a risk analysis that estimates the impact of the issues found, and the drafting of the report. The report gathers the issues, risks and proposed changes to the architecture.
A Secure Architecture Review focuses on the aspects that, for the type of infrastructure, most often lead to security problems. Within the agreed scope it assesses, from an architectural point of view, aspects such as the development lifecycle, code quality, test routines, authentication, authorisation, cryptography, web servers, databases and firewalls.
A Secure Architecture Review analyses design choices starting from the documentation and discussions with the technical team. To verify an existing network with attack tests, the dedicated service is the Network Penetration Test; to analyse an application's source code, it is the Secure Code Review.
The Secure Architecture Review report lists the issues found, the risks they create and the proposed changes to the architecture. It also documents the activities carried out during the analysis.
The cost of a Secure Architecture Review depends on the size and complexity of the architecture: networks, cloud environments, and custom components. Work uses design documentation and discussions with the technical team and concludes with a report on issues, risks, and proposed corrections; it is performed on a Best Effort basis.
Shape your security priorities into a tailored proposal