Secarma is an independent cybersecurity consultancy that utilises ethical hacking methods to test the strength of your organisation’s existing security posture.

Our specialists have the skills and experience needed to identify vulnerabilities within your systems before these undetected issues can be exploited by cybercriminals. We’re here to help you take your organisation to the next level of security maturity.

thumbnail_secarma.png

secarma.png

Secarma

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

Vulnerability management starts with detecting vulnerabilities, progresses to assessing the level of threat, the likelihood of exploit, and the priority of remediation.

Easy to understand reports on remediation status, current level of risk, and the overall remediation program are included as part of a typical vulnerability management platform.

Vulnerability management covers all elements of IT including networks, devices, applications, infrastructure, in both private and public cloud and on premise.

When a vulnerability is discovered, it will be identified and given a CVE (Common Vulnerability and Exposure) number and listed on the MITRE vulnerability database.   Each vulnerability is evaluated by the National Vulnerability Database / NVD team (part of NIST, the US National Institute of Standards and Technology), and then, once evaluated, is given a threat level score, using the Common Vulnerability Scoring System (CVSS).



Vulnerability Management

Penetration testing is the ethical testing of a company's cyber security defences.

Penetration testing can be for a company's entire IT cloud and IT infrastructure, a single application, or for an IoT (Internet of Things) device.
 


A penetration test or "pen test" will emulate the full set of actions that are performed by cyber criminals.  These actions are identified in leading cybersecurity frameworks - and most clearly in the MITRE ATTACK framework.

The objective of a pen test is to report on vulnerabilities that could be exploited, and then report them back to the company, so that the vulnerabilities can be addressed before they are exploited by a cyber attacker.

Penetration testing can be restricted to testing the level of cyber resilience from a technology perspective, or can extend to simulated email phishing tests, where employee cyber awareness and resilience is tested.

Beyond Penetration testing, there is Red Teaming, where a team will test all elements of corporate security defences, including physical security, site access, cyber security, and social engineering elements.  Red Teaming is viewed either as additional to penetration testing, or as an advanced, next level form of penetration test.


Penetration testing

Secarma is an independent cybersecurity consultancy that utilises ethical hacking methods to test the strength of your organisation’s existing security posture.