Incident response & forensics​
- Security incident management
- Identification and containment
- Eradication and recovery
- Lessons learned and reporting
Penetration testing & vulnerability assessment
- ICS and SCADA environments
- Web application testing
- Network testing
- Mobile device and application testing
Security training
- Security awareness
- Annual security training for compliance
- Secure software development
- Anti-phishing, anti-social engineering
Secure code review
- Input validation and sanitization
- Secure by design techniques
- Secure SDLC practices
