Architecture

Threat and risk management is the foundation for information security. Enterprises must conduct regular risk assessment, threat identification, risk analysis and risk treatment. The following process is a reference for threat and risk management.

Threats can be identified with a traffic threat detection platform, a log audit and analysis platform; Vulnerabilities can be identified with questionnaire survey, interview, vulnerability scanning, penetration test and other methods. ECCOM provides security services such as asset sorting, vulnerability scanning, penetration test, risk analysis, etc. during risk assessment, assist organizations to promote risk assessment, and recommend the most appropriate treatment strategy.

Features

Process specifications

Risk management processes are designed for enterprises based on typical information security management systems and industry best practices.

Comprehensive service

Life cycle services including risk assessment, risk identification, risk analysis and risk treatment.

Continuous improvement

Ensure the implementation and gradual improvement of risk handling process with ECCOM's long-term security practice.