IT & security audits
Systems, networks, configurations, applications, APIs, databases, logging, privileges and ISMS. Documented findings and prioritized remediation.
What the service covers
- Systems, networks and databases
- Configurations and hardening
- Applications and APIs
- Identities, privileges, logging and ISMS
Penetration testing & AppSec
External, internal, web and API testing followed by retesting. Contractual scope and written authorization before any assessment.
What the service covers
- Authorized external and internal environments
- Web applications and APIs
- Application controls and access management
- Agreed remediation verification
GRC, virtual CISO & compliance
Security policies and strategy, ISO 27005 risk assessment and treatment, ISO 27001 ISMS, remediation and audit readiness.
What the service covers
- Security strategy and virtual CISO support
- Risk assessment and treatment
- ISMS and security policies
- Controls, evidence and audit readiness
Banking, payments & regulated sectors
PCI DSS, SWIFT CSP, controls and evidence, segregation of duties, banking security and group governance.
What the service covers
- Banking and payment environments
- PCI DSS and SWIFT CSP controls where applicable
- Segregation of duties and sensitive access
- Evidence collection and group governance
Security architecture, cloud & Zero Trust
IAM, PAM, MFA, Microsoft 365, Azure, AWS, segmentation, WAF, EDR/XDR and DLP: architecture and hardening aligned with your context.
What the service covers
- Systems and cloud architecture
- IAM, PAM and multifactor authentication
- Segmentation, WAF and endpoint protection
- Data protection and Zero Trust principles
SecOps, SIEM / SOC & threat intelligence
SOC/GSOC design and operating support, SIEM, SOAR, detection use cases, alerts, indicators of compromise and investigation.
What the service covers
- SOC/GSOC design and operating support
- SIEM collection, normalization and correlation
- Use cases, alerts and SOAR orchestration
- Investigation and threat intelligence
Cloud Security — AWS & Microsoft 365
Deployment, configuration, security hardening and auditing of AWS and Microsoft 365 environments. Identity and access management, data protection, monitoring and compliance across cloud environments.
What the service covers
- AWS and Microsoft 365 environments
- Identities, roles, access and authentication
- Secure configuration and data protection
- Cloud logging, monitoring and compliance
Incident response & forensics
Triage, coordination, evidence preservation, investigation, containment and lessons learned.
What the service covers
- Incident triage and response coordination
- Preservation of available evidence
- Investigation of affected systems and logs
- Containment and lessons learned
AI governance & security
ISO/IEC 42001, NIST AI RMF, model and RAG security, prompt injection, compliance and AI risk governance.
What the service covers
- AI use governance and risk management
- ISO/IEC 42001 and NIST AI RMF frameworks
- Model, data and RAG pipeline security
- Authorized prompt injection scenarios
Resilience & business continuity
ISO 22301, business impact analysis, BCP/DRP, RTO/RPO, crisis management and tabletop exercises.
What the service covers
- Business impact analysis and critical dependencies
- BCP, DRP and RTO/RPO objectives
- Crisis management arrangements
- Exercises and the ISO 22301 framework
Secure development & integration
AppSec, DevSecOps, automation, secure APIs, tooling integration and secrets management.
What the service covers
- Development lifecycles and DevSecOps practices
- Applications and APIs
- Integration pipelines and automation
- Tool integration and secrets management
Training & skills transfer
Training catalogue, practical workshops and tailored programs to strengthen team capabilities.
What the service covers
- Cybersecurity, GRC and AI training catalogue
- Practical workshops and contextual exercises
- Programs tailored to teams
- Knowledge and methods transfer
Tailored services and security solution integration
Tailored support, selection, deployment, configuration and integration of cybersecurity solutions aligned with organizational needs. Security hardening, interoperability and knowledge transfer.
What the service covers
- Needs assessment and cybersecurity solution selection
- Deployment, configuration and hardening of selected solutions
- Interoperability with existing systems and tools
- Documentation and knowledge transfer to teams
- 1Your inquiry
- 2Preview
- 3Finish
Review your inquiry
Your inquiry is ready
Choose how to share your inquiry with contact@mundiatrust.com.
Nothing is sent automatically. Your information stays on this page until you act. Sending takes place in your email application.
Contact
Let’s discuss your needs.
A question, a project or a need for support? Tell us about your cybersecurity, audit, governance, technology or training priorities.
MundiaTrust
Let’s discuss your priorities.
Audit, governance, resilience or training: let's define the need and next steps together.
Request a quote