Security Risk Assessment & Audit (SRAA)
Assess cybersecurity risks and evaluate the effectiveness of security controls against the HKSAR Government's IT Security Policy (S17) and Standards (G3). Our SRAA services identify risks, control deficiencies, and compliance gaps, providing practical recommendations to strengthen security governance, improve cyber resilience, and help organizations meet regulatory obligations, including Cap. 653 Protection of Critical Infrastructures (Computer Systems) Ordinance in Hong Kong.
- Security Design Review
- General Control Review
- Cloud Security Configuration Check
- Vulnerability Scanning
- Penetration Testing
- Source Code Review
- iAM Smart Security Checklist
With reference to
- HKSARG DPO Baseline IT Security Policy (S17)
- HKSARG DPO IT Security Guidelines (G3)
- HKSARG DPO Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)
What you'll receive
- Project Kick-off Meeting
- Follow-up Plan
- SRAA Verification Report
- Other deliverables to be confirmed during kick-off
Back to services