The scope of work covers four areas: management, technical, special-purpose, and research collaboration. Engagements follow the scope of each task, from certification and organizational design through vulnerability assessment, penetration testing, and overseas ODA.
01
Management
- Enterprise-wide information security strategy consulting
- Consulting on domestic and international information security certifications (ISMS-P, ISO27000-Family, TISAX, PCI-DSS, and others)
- Consulting on the design of an enterprise-wide (personal) information protection organization
- ODA consulting for developing countries (national information security strategy, personal information protection strategy, and others)
02
Technical
- Security vulnerability assessment consulting (NW, Server, DBMS, PC, Printer, Middleware, Security System, and others)
- Simulated hacking assessment and penetration testing consulting (Web, LLM, Wireless, Network, Malware, and others)
- Secure development consulting for information systems
- ISP consulting for information system implementation
- Security vulnerability assessment consulting for overseas ODA projects
03
Special Purpose
- Log-based firewall ruleset tuning consulting
- Active Directory user abuse assessment consulting
- Zero-Trust level assessment consulting
- Consulting to establish a software supply chain security management system
- Pre-assessment consulting to prepare for a security posture evaluation audit
- Enterprise-wide security awareness consulting based on change management
04
R&D Collaboration
- Bug Bounty Platform implementation
- Customized Attack Surface Management System implementation
- Open-source development for developing countries