For those systems where there is uncertainty about the security controls that have been implemented, we
offer review services that include investigation, documentation and review of the security architecture; planning, review, and analysis of vulnerability scans; analysis of relevant code; review of security policies, procedures, and practices; identification and analysis of risks to confidentiality; and recommendations for risk mitigation and security control enhancement.