Layer7Security

Notice: Layer7Security™ ℠ is now Metal Castle Inc.

AWS Cloud Security
  • Cloud Security Alliance's Certificate of Cloud Security Knowledge (CCSK)
  • All 3 Amazon Web Services (AWS) Associate certifications: System Operations (SysOps), Developer, and Architect. AWS "SysOps DevArc"
  • Cloud computing security controls, architecture, and frameworks
  • Incident Response, and electronic discovery
  • Security and privacy
  • Identity management
  • Data security & encryption
  • Audit & Compliance management
  • Cloud Controls Matrix (CCM), and Consensus Assessments Initiative Questionnaire (CAIQ)
  • Cloud security threats
.
Application Security (AppSec)
  • Creation and integration of a Secure SDLC into Agile DevOps CI/CD chains - DevSecOps
  • Creation of an Application Security Standard, and metrics
  • Static analysis of application code & code security reviews and scanning
  • Dynamic application security analysis
  • Application security architecture and design review
  • OWASP Top 10 & SANS Top 25
  • NIST, COBIT, OpenSAMM, BSIMM, OWASP, SANS, CVSS, CWE, CAPEC, CERT, ENISA, and FFIEC
  • Veracode, IBM AppScan, Coverity, HP Fortify
  • ISO/IEC 9126, McCall
.
CyberSecurity
  • Security by design
  • Awareness training
  • Security breaches, and cyber incident response
  • Computer information systems protection
  • Advanced intrusion prevention systems (IPS)
  • Vulnerability scanning, and reduction
.
Information Security (InfoSec)
  • Full-stack defense-in-depth
  • Information assurance
  • Data loss prevention (DLP)
  • Data privacy, and encryption/cryptography
  • Information security policy, and information security manual (ISM)
  • Identity and access management (IAM), and access controls
  • Threat and risk assessment
  • Regulatory compliance
.
Email us for your solution.
Security Architecture
  • Cloud, application, and network security architecture
  • Application protection
  • defense in depth design
  • Federation, SSO, Authentication, and authorization systems including for APIs (micro services), B2B, and B2B2C
  • Creation of Baseline security standards
  • Secure application development
.
Governance, Risk & Compliance (GRC)
  • Technical audit for PCI, FFIEC for Banking, Financial Services and Insurance (BFSI)
  • Security policy, standard, creation and reviews
  • Privacy controls, Personal Information Protection and Electronic Documents Act (PIPEDA), Gramm-Leach-Bliley Act (GLBA), SoX 404
  • Vendor management
  • Data classification and discovery
  • Security architecture governance
.
Security Operations
  • Prevent, detect, defend, contain, and recover
  • Creation of SOC procedures
  • Threat intelligence
  • vulnerability management and scanning
  • Security incident and event monitoring (SIEM), and audit logging
  • Data breach preparation
  • Cyber incident investigations, and forensics
  • Security health checks
  • Intrusion prevention system (IPS), file integrity monitoring (FIM), web application firewall (WAF), API firewall, Antivirus
.
Frameworks & Standards
  • Creation, review, and mapping of standards
  • Updating policies throughout an organization to include security, privacy, cloud, etc.
  • Cloud Computing Architectural Framework
  • NIST, COBIT, OpenSAMM, BSIMM, OWASP, SANS, CVSS, CWE, CAPEC, CERT, and FFIEC Handbook, SoX 404
  • Cybersecurity Framework
  • CMMI, Six Sigma
.