Security Consulting

The Beginning of Achieving Security Initiatives

Our expert group performs security assessments to analyze cyber threats and propose optimal strategies to build a robust security system.

Overview

We Find Out What Needs To Be Improved, And We Make It Better.

Our expert group performs security assessments to analyze cyber threats and propose optimal strategies to build a robust security system.

Objective

We Focus On Maximizing Your Business Value / Extrinsic Value, Intrinsic Value

Strengths

Methodology

AhnLab Security Engineering Methodology (ASEM)

AhnLab has been designated by the Korean government as a “Knowledge Information Security Consulting Services Provider,” and ASEM is a verified methodology that has won the “Software Engineering and Building Technology” Award. AhnLab’s security assessment services leverage ASEM,
which has been perfected over the years through various projects, to build a feasible and practical information protection solution.

ASEM Process

100 Strategy Formation, 200 Risk Analysis, 300 Response Development, 400 Implementation, 500 Quality Control

ASEM Characteristics

ASEM accomplish the task by fulfilling the five items in the chart below.

ASEM - AhnLab Security Engineering Methodology

1. Core Business & Task Support

We analyze and evaluate the application system that supports the organization’s core business and infrastructure. Then, we present an information protection solution that will maintain the stability and reliability of the business.

2. PDSC Analysis Technique

Leveraging the PDSC (Plan-Do-See-Control) methodology, we evaluate the customer’s security system and overall status to provide the best security measures.

PDSC Analysis Technique - Management, Subject(Noun), Action(Verb)
Management	Subject(Noun)	Action(Verb)
Plan	Policy Procedures	Does it exist? Is it defined in the official document?
Do	Education Performance	Has it been performed? How is the progress?
See	Review Authorization Report	Has the it been reviewed? Has it been authorized? Has it been reported?
Control	Decision Making Control (feedback) Control (feed-forward)	Has the decision been made? Has it been implemented?

3. Component Based Process(CBP)

ASEM modularizes each process of security assessment services so that it can be applied to various environments and delivered with cost-effective results.

4. KPI Delivery

We define the security objective for customers based on our sophisticated security model and present the KPI of the security performance and its contribution to the organization’s business objective.

5. Threat Response Scenarios

We present optimal threat identification, 5-stage response scenarios, and continuous verification to ensure customers always stay response-ready.

PDSC Analysis Technique - Management, Subject(Noun), Action(Verb)

Management

Subject(Noun)

Action(Verb)

Plan

Policy
Procedures

Does it exist?
Is it defined in the official document?

Education
Performance

Has it been performed?
How is the progress?

See

Review
Authorization
Report

Has the it been reviewed?
Has it been authorized?
Has it been reported?

Control

Decision Making
Control (feedback)
Control (feed-forward)

Has the decision been made?
Has it been implemented?