Practice area

Security Assurance

Security Assurance

Delivers bespoke tactical and strategic assessment and assurance services to deliver long-term, measurable improvements in security

Move beyond compliance and ahead of your attacker

Today’s organizations face a myriad of cyber threats and must also demonstrate compliance with general and market-specific security standards. They have to operate these compliant services in a landscape where the threat is constantly changing.

Our CHECK and CREST-qualified Cyber Security Assurance experts can deliver tactical assessments of applications, systems, networks, security devices and appliances, ensuring all components are resilient against today’s cyber threats.

For organizations with mature, well-implemented security programs, we deliver bespoke intelligence-led Targeted Attack Simulations that assess capability to respond to varying threats. These use expertise from MWR’s Cyber Defense and Investigations and Incident Response practices to emulate real world attackers. 

We also support our clients in building strategic security programs, where a combination of bespoke frameworks, training and rich technical assessments can help instil a security culture through your business. 

“We work with clients to help them move beyond traditional security vulnerabilities and recommendations — to achieve long-term improvement and measurable results in security.”

David Hartley, Managing Consultant, MWR

Core Solutions

Targeted Attack Simulation

Mimics the tactics, techniques and procedures of threat actors to measure capability to protect, detect and respond.

Application Security Assurance

Comprehensive review of an application's security against benchmarks such as the OWASP Application Security Verification Standard (ASVS).

Infrastructure Security Assurance

Security assessment of networks and systems, complemented by focused penetration tests, revealing issues and qualifying risk.

Security Programs

Bespoke tailored programs that help instill an internal security culture and provide frameworks to support DevSecOps and application SDLC processes.

Our thinking on Security Assurance

Article

Are your defenses making you stronger or weaker?

Security issues in security products are more common than might be assumed, as an MWR advisory on a Carbon Black product has recently shown.

Article

Trouble at t’ Office

Article

Should Security Companies Do Better With Product Security?

Article

Who Needs Security Assessments?

Article

What do we mean by 'Penetration Test'?

 

Accreditations

MWR is an accredited member of The Cyber Security Incident Response Scheme (CSIR) approved by CREST (Council of Registered Ethical Security Testers).
MWR is certified under the Cyber Incident Response (CIR) scheme to deal with sophisticated targeted attacks against networks of national significance.
We are certified to comply with ISO 14001 in the UK, an internationally accepted standard that outlines how to put an effective environmental management system in place.
MWR is certified to comply with ISO 27001 to help ensure our client information is managed securely.
As an Approved Scanning Vendor MWR are approved by PCI SSC to conduct external vulnerability scanning services to PCI DSS Requirement 11.2.2.
We are members of the Council of Registered Ethical Security Testers (CREST), an organisation serving the needs of the information security sector.
MWR is a supplier to the Crown Commercial Service (CCS), which provides commercial and procurement services to the UK public sector.
MWR is a Qualified Security Assessor, meaning we have been qualified by PCI to validate other organisation's adherence to PCI DSS.
As members of CHECK we are measured against high standards set by CESG for the services we provide to Her Majesty's Government.
As a Certified Simulated Attack Manager and Certified Simulated Attack Specialist, MWR are authorized by CREST to perform STAR penetration testing services.