Tuik Security Group Tuik builds, manages, and executes customized cybersecurity programs for small to medium-sized companies. We work with our clients to identify governance deficiencies and technical vulnerabilities, deliver services that improve security, and help them operationally comply with a selected framework.
Our services Each client requires a unique portfolio of the services we provide.
Vulnerability Testing IT Operations Governance & Mitigation Vulnerability Testing Vulnerability Testing Identify risks with manual and automated testing using industry best practices.
Discuss vulnerability testing Infrastructure & exposure Penetration Testing Network-layer Vulnerability Assessments and Scanning – Internal & External Cloud Infrastructure Vulnerability Tests: Azure, AWS Iterative Vulnerability Testing Real-time Change and Vulnerability Detection Wireless Vulnerability Testing Infiltration and Exfiltration Testing Applications & development Dynamic Application Scanning Testing (DAST) Application Vulnerability Testing: Web, iOS, Android Application Security Pipeline Creation, Execution, and Management Integrated DevSecOps Testing Social engineering Social Engineering: Phishing / Vishing / SMSing IT Operations IT Operations Get help running your IT and security program and get the information you need.
Discuss IT operations Leadership & planning Fractional IT Director IT Budgeting & Strategy IT Spend Monitoring & Spend Analysis People & operations Ticketing & Documentation Inventory Management Email Management Personnel Onboarding/Role Changes/Offboarding Infrastructure Key Distribution, Stewardship and Support Internet Domain Curation Domain Name Service Management Monitoring & Alerting Engineering/Design Product Infrastructure Engineering Security & resilience Deep & Dark Web Reconnaissance & Monitoring Disaster Recovery & Business Continuity Preparedness Audit Information Security Integration Vulnerability Management Firewall Rule Reviews Governance & Mitigation Governance & Mitigation Understand how to manage risk and run your security program based on a framework.
Discuss governance Leadership & policy Virtual CISO, Director of Information Security, InfoSec Advisership Fractional Privacy Officer Policy Review, Improvement, Creation Policy Set Management and Curation Ad-hoc Security Consulting and Concierge Support Compliance & assurance SOC2 Readiness Validated Compliance Self-Assessments: NIST 800-171, NIST CSF, ISO, PCI, HITRUST, HIPAA, Customized, and others Evidence Collection and Validation Risk & remediation Operational Security Risk Assessments Third Party Vendor Risk Management Gap Remediation Management Project Management – cybersecurity and general IT initiatives Active Directory Audits Encryption Best Practices Vulnerability Assessments Regulatory Compliance Penetration Testing Deep & Dark Web Reconnaissance Phishing Assessments Incident Response Training Exercises Wireless Security Assessments Firewall Review Employee Cybersecurity Training Third-Party Vendor Risk Assessment