Dealing with digital cybersecurity is increasingly becoming one of the biggest challenges facing knowledge-intensive organizations and clients, especially in the realm of accounting and financial management. Therefore, we at Barzily have established a consulting firm specializing in providing cybersecurity consulting and solutions to the firm's clients and entities interested in professional services in the field, with an emphasis on accounting and financial matters.
Cybersecurity Services
- Cyber risk assessment
- Organizational Cyber Policy – Overview and Planning
- Penetration tests
- Vulnerability scanning
Cybercrime Investigation – Computer Evidence Analysis
- Post-mortem analysis of information security incidents
- Computer Log Analysis
- Finding traces left behind after a hack (Hacking Footprints)
- Collection of digital evidence in civil or criminal legal proceedings
- Expert testimony in court
Responding to and resolving incidents
- Data collection and storage
- Information and data retrieval and evidence analysis, including legal proceedings
- Threat detection and disclosure of malicious software and code
Penetration tests
- Emulating hacking actions from a "friendly" source - "Ethical Hacking"
- Internal penetration tests
- External penetration tests (black-box methodology)
- Diagnosis using mixed methods (identifying weaknesses and vulnerabilities, DoS attacks, and more)
- Dynamic penetration tests (based on continuity and frequent tests to improve information and cyber security posture)
Information security services
Wireless network security audit
- Passwords, access, data leak
- Discovery of "pirate" access points"
- Isolation
- Encryption, certainty, surveillance
Database security check
- Exposure to various database attacks such as SQL Injection and performing database manipulations
- Exposure to various attacks and takeovers, analysis and identification of vulnerabilities, reliability of information and data, planning of network and software architecture
Specialty in Oracle, MS-SQL, and MySQL databases
Information security in the field of virtualization and virtual servers
We are experts in Microsoft's Hyper-V technology, as well as Sun's VMWare and VirtualBox.
Encryption (application and cryptography)
- Encryption Quality and Standards Test
- Hardware encryption testing, including for hard drives, portable drives, and any other media
Identifying weaknesses in IT systems
VPN, CRM, and ERP systems, including remote access, as well as system interactions and integration points.
Information Security Systems Performance Evaluation
Antivirus, anti-spam, anti-malware and spyware prevention, IPS/IDS products, DLP solutions, firewall rule and log activity monitoring, token implementation, mobile device access restrictions, smart tokens, VPN remote access, endpoint security, mobile security
Backup Reliability Review
Data breach prevention
- Analysis of the current situation and mapping of weak points
- Implementation of measures to prevent information loss and leakage
Encouraging awareness and guidance
- Training, instruction, and courses at various levels for all employees
- Automated solutions designed to raise security awareness
- Periodic simulations to diagnose the state of awareness and compliance with cyber and information security policies
Technology consulting services for these fields:
- Information Communication and Satellite Communication
- Business Intelligence (BI)
- Industrial espionage and countermeasures and defense means
Code Development Review from an Information Security Perspective
A specialized methodology that allows for the integration of regular QA and development processes to increase and accelerate development times while still maintaining a high level of information security in code and development.
Information Security and Cyber Standards Authority
- ISO 27799
- ISO/IEC 27001
- ISO 27001 / 27002
- PCI DSS Certification
- Cloud Security Certification
- SSAE Review (formerly SAS-70)
