Security Services

1. Security Services IoBM offers holistic security services with the flexibility to manage the ever-evolving threats to the enterprise, compliance and regulatory requirements. Vulnerability Management Program Security Information& Event Management Incidence Response Disaster Recovery Business Continuity Management Threat Intelligence Identity and Access Management services provide timely access to enterprise data and applications while enforcing the appropriate access rights Identity Provisioning Directory Services Access Management Identity Governance Secure Software Development Lifecycle Data Loss prevention Application Assessment Data Classification Application Security manages business and information risk through solutions for enterprise applications. Data Protection provides the policy framework and technologies to keep sensitive information secure throughout the information lifecycle. Endpoint Security Platform Security Network Security Cloud & Mobile Security Governance Security Risk Mgmt Compliance Infrastructure Security provides visibility info information risks and capabilities to defend enterprise assets through network and platform security technologies Security GRC develops a framework to determine an integrated environment to ensure secure operations, risk-conscious decisions and manage compliance Cyber Security enables organizations to manage advanced threats to their business by detecting, assessing and responding to threats through Intelligent Security capabilities. Business continuity develops capability to ensure continuity of organization's critical business functions during serious incidents or disasters and recover to an operational state within a reasonably short period.

2. IOBM security services IoBM offers holistic security services with the flexibility to manage the ever-evolving threats to the enterprise, compliance and regulatory requirements. Vulnerability Management Program Security Information& Event Management Incidence Response Disaster Recovery Business Continuity Management Threat Intelligence Identity and Access Management services provide timely access to enterprise data and applications while enforcing the appropriate access rights Identity Provisioning Directory Services Access Management Identity Governance Secure Software Development Lifecycle Application Assessment Data Classification Data Loss prevention Application Security manages business and information risk through solutions for enterprise applications. Data Protection provides the policy framework and technologies to keep sensitive information secure throughout the information lifecycle. Endpoint Security Platform Security Network Security Cloud & Mobile Security Governance Security Risk Mgmt Compliance Infrastructure Security provides visibility info information risks and capabilities to defend enterprise assets through network and platform security technologies Cyber Security enables organizations to manage advanced threats to their business by detecting, assessing and responding to threats through Intelligent Security capabilities. Security GRC develops a framework to determine an integrated environment to ensure secure operations, risk-conscious decisions and manage compliance Business continuity develops capability to ensure continuity of organization's critical business functions during serious incidents or disasters and recover to an operational state within a reasonably short period. 2

3. security strategic services • IoBM offers Security capabilities to assess clients’ environmental risks, protect information “crown jewels”, and support the development of business-driven / risk-focused security architectures, capabilities, operating models, and compliance plans. We enable organizations to achieve their organizational goals and pursuing their mission while minimizing the risk of security disruptions and breaches. Threat & Vulnerability Assessment Application Security Assessment & Remediation Information Protection Security Capability Maturity Assessment Enterprise Security Architecture Security GRC Security Risk Assessments • Enable organizations to detect vulnerabilities in their environment and measure their level of security against real-world threats. • Help organizations iintegrate security testing and reviews of application as part of the software development life cycle, and perform continuous security testing during the application life time • Identify sensitive information assets and the implemented controls to avoid unauthorized access throughout the information lifecycle • Help organizations understand current security posture in regards to security capabilities, identify areas for development to gain visibility and control over cost areas • Enable an organization to define the required security capabilities in-line with business objectives to build a prioritized roadmap Helps organizations to identify the risks and evaluate the consequences of the threats scenarios through qualitative or quantitative approach. • Helps define a GRC framework to determine an integrated environment to ensure risk-conscious decisions and manage compliance

4. Threat & Vulnerability Assessment & Remediation DESCRIPTION • Threat & Vulnerability assessment services allow organizations to measure the level of security of their assets, not only against internal and external standard or best practices, but also against real-world threats and attack techniques • T&V assessments support the effective mitigation of operational risks by comprehensively assessing the vulnerabilities exposure, associated threats and exploitability in their specific context, on-demand. Our T&V Remediation help identify and prioritize remediation activities based on business criticality. • Services coverage include: • Internal and external infrastructure and components (including Cloud), • Custom and packaged applications • People and processes SERVICESCATALOG Penetration Testing Source Code Security Review Vulnerability Assessment Social Engineering Configuration Assessment Physical Security Review

5. Application Security Assessment & Remediation DESCRIPTION • Application Security Assessment & Remediation services support efficient and focused software security initiatives, and enables: • Testing and reviews throughout the Software Development Lifecycle (SDLC), to protect custom and customized applications from the start • Enterprise Resource Planning (ERP) security initiatives, ensuring security is taken care of and carried through from the design phase to the operations • Application assessment pproach supports the setup of a secure software development capability starting with the developers and including on premise and on-demand delivery modalities, using a repeatable and proven methodology SERVICESCATALOG Secure SDLC Enterprise Application Security

6. Security Compliance Assessment DESCRIPTION • Security Compliance Assessment services help organizations align with evolving compliance and regulatory requirements by identifying and addressing control gaps. • Our approach fits a variety of client complexity levels and use cases: • Control design assessment : review documentation to assess if the design of the controls meets the requirements • Control implementation assessment : assess whether the implementation of the controls is effectively done and verify that all documented controls are known to the organization and exist • Control effectiveness assessment : assess the effectiveness of the control SERVICESCATALOG Security Compliance Readiness Evaluation Privacy Assessment

7. Information Assets protection DESCRIPTION • At IoBM we help organizations to proactively secure their platforms and sensitive Data considering emerging technologies such as Big Data. • We follow a phased approach to address organizations' information protection needs: • assess organization Information Protection capability maturity, • then identify and high value data assets, • Finally setting up controls to prevent loss of sensitive data and maintain the privacy of data • Data Protection Assessment: Evaluate organizations information protection capability maturity, identify gaps and provide a roadmap to implement business aligned Data services. • Data Discovery & Classification: Identify and classify sensitive data, data owners and data on storage repositories • Data Loss Prevention: detect and prevent violations to corporate policies regarding the use, storage and transmission of sensitive information • Data Encryption & Masking: Design and deploy Encryption and Masking and prevent security issues SERVICESCATALOG Data Protection Assessment Data Discovery & Classification Data Loss Prevention Data Encryption & Masking

8. Capability Maturity & Technology Assessment DESCRIPTION • Our Security Capability & Technology Assessment help understanding the organizations current maturity level and developing their target ambitions. • It also has been designed to be both flexible and adaptable, suitable for a variety of client needs and requirements. • The Security Capability & Technology Assessment brings numerous benefits such as enhanced decision making, increased stakeholder confidence, compliance with regulations and readiness to market volatility. SERVICESCATALOG Security Capability Maturity Assessment Security Metrics Definition IT/e-GRC Design & implementation Security Risk Assessment

9. Enterprise Security Architecture DESCRIPTION • Our Enterprise Security Architecture services enable an organization to define the security vision, architect processes, applications and systems to be secure and build a prioritized roadmap of security initiatives to be in order to protect their information assets and enable the business. • It also helps define the appropriate governance and related security policies, communicate them across the enterprise and increase the awareness around security and risks. SERVICESCATALOG Security Roadmap Definition Enterprise Security Architecture Security Governance Definition Security Policy Framework Establishment Security Awareness & Training