Policies, standards, and procedures that define appropriate handling of information in the business environment and set the ground rules for security architecture and technology, are constantly changing.  TGC can help to integrate existing IT policies and procedures with industry best practices, regulatory needs, and business functions.  If no policies currently exist, TGC will assist in the development of appropriate documentation for new policies and procedures.  

The first step is a Global Assessment (also referred to as the Holistic Assessment) evaluating an organization's documented policies and procedures.  If an organization is regulated by a federal mandate (Sarbanes Oxley, HIPAA, Gramm-Leach Bliley Act, etc.), these policies and procedures are assessed with the specific regulatory requirements in mind.  Members of the organization's staff are also interviewed to determine how (and if) the documentation is actually used.

Following the policy review, comes the technical review.  This provides the "point in time" snapshot of the organization's current security posture.  From start to finish, TGC consultants can manage this entire process.