Specialized Services

Enterprise Analysis

A robust enterprise solution that gets down to brass tacks, we map your policies and procedures' maturity across industry standard security controls. An extensive interview and documentation process leaves no stone unturned. Your greatest strengths, weaknesses, and all points between are spelled out in a detailed gap analysis and roadmap. We work with common security controls, such as CIS 18, NIST, and ISO 27001.

Interested in using another security framework? Our team is ready to scope the analysis to fit your needs no matter the framework that best fits your industry.

Security Framework Analysis

Similar in purpose to the Enterprise Analysis but reduced in scale, the SFA caters to the small to mid-size business and provides a consolidated maturity analysis. The same controls offered for the Enterprise Analysis are grouped by process domain and explored through interviews and documentation. The SFA provides actionable guidance to help you close gaps and plan for the future.

Smaller organizations looking to begin creating security policies and procedures benefit from the Raxis SFA as well. The Raxis team examines any documentation your team uses and gathers information about informal procedures and process gaps through interviews with teams within your organization.

Tabletop Exercises

A plan is only as good as the people following it. Simulated ‘tabletop’ security incidents utilize a narrated discussion to engage key players in the organization. We'll guide your teams as they work through coordination and resource challenges that you never knew were there. Real world scenarios will open your eyes to a clearer view of how processes translate to actions.

Purple Team Service

Red meets blue in this hybrid assessment model that brings our offensive and defensive knowledge and experience to bear for your team. This is ‘Top Gun’ for cybersecurity. While part of our team is actively attacking, others are observing your company's blue team’s ability to detect, track and stop the threat. Our team interjects only when necessary, building skills and confidence in real time. This service is most effective when it’s used on a quarterly or semi-annual basis to keep pace with the changing nature of the threats.

Pre-Acquisition Security Assessment

Due diligence doesn’t end with the balance sheet and income statement. Acquiring a business means acquiring their exposures, some of which may not be apparent. We can conduct a thorough assessment to give you a clear picture of a target company’s security risks so you can go into negotiations with confidence.

Incident Response Services

While we'll do everything we can to proactively prevent your system from being hacked in the first place, sometimes the bad guys win. We'll help you figure out how they got in, what was damaged or stolen, and help you get everything back online.