Auditing and Consulting

A characteristic of today's organizations is the abundance of information and information systems. Frequently, information and its support technologies are frequently regarded  as the most valuable assets. In the rapidly changing work environment, expectations related to benefits from information technologies are high. Therefore,  management demands emphasize that information systems should demonstrate ever-enhancing quality, higher functionality, easier use, a shorter delivery period,  and ever-improving service levels.

Companies appreciate the benefits they gain from an effective and updated information system. However, frequently, risks emerging as new technologies are implemented are not fully conceived or considered in the risk analysis of business processes. Still, successful organizations perceive and manage the risks related to the implementation of new technologies and establish the required quality, reliability and security demands to their information systems. At the same time, they demand that the above mentioned requirements be realized at an expense as small as possible.

Since it is becoming a common practice that enterprises and organization do not  themselves provide solutions to the problems of information technology and they make more use of the services of information system software development companies, a demand for highly qualified IT personnel in  companies is decreasing. At the same time, an adequate level of knowhow is required to establish tasks for a company's information system, order an information system and check how well the information system developed conforms to the requirements set.

Cybernetica offers a variety of services and consultancy to support different stages of the development process of an enterprise's or organization's information system.

• Project management - Cybernetica offers a software project management service based on the Rational Unified Process methodology and the ISO/IEC 12207  standard, with a software environment supporting it. Cybernetica has created a security development environment supporting joint distributed projects, which allows for detailed management and monitoring of the development process and acquisition of an overview of a project content at any moment.

• Initial study of an information system - we are prepared to conduct mapping of an organization's business processes and future implementation patterns of an information system; we compose the relevant UML models and provide consultations in any of these activities. We use  Rational Rose as our modelling environment.

• Security analysis - companies tend to overlook information security problems  when they establish the tasks of information systems, for instance, related to managibility, completeness or confidentiality. In addition to the requirement to protect one's information resources or to offer a service with the quality demanded by the client, security requirements may result from legal acts or from other related systems. Cybernetica offers a security analysis service based on the ISO/IEC 13335 and ISO/IEC 17799 standards, aiming at establishing security requirements of a planned system and the corresponding security demands.

• Information systems auditing - frequently, an owner of an information system faces a need to evaluate the actual properties of an information system. The reason may imply assurance related to the conformity of a development project delivered to the requirements set  or a proof to be provided in terms of the quality of one's information system or any of its parts or a particular software security solution.

Cybernetica offers  an auditing service based on CobiT methodology, involving evaluation of an organization and its information system according to well-known requirements and practices of IT supervision and management. In addition, you can benefit from Cybernetica's experience regarding the evaluation of the conformity of different stages of the software development process to the standards of the development process. Cybernetica's strengths in the theory and practice of information security ensure its potential to provide audit security solutions of any complexity.

Further information:
Monika Oit
Head of Department
monika.oit[ät]cyber.ee
Tel. + 372 665 4235