Content Security

Security testing, advice and emergency response all sit under one roof at Content Security, an Australian cyber security consultancy that says it covers the industry from one end to the other. It describes itself as an IT security integration and consultancy firm with more than twenty years in the field, and it positions itself as a single point of contact for organisations that want their security strategy to keep pace with their business aims.

Testing a network as an attacker would

The active defence side of the business covers penetration testing, red teaming and social engineering exercises, alongside architecture audits and configuration reviews. The point is to find weaknesses before someone else does and to reduce risk in a measurable way.

Gap analysis and a security roadmap

The advisory work starts with a gap analysis, which compares an organisation's current security posture with recognised standards and legislation. The firm names ISO 27001, NIST, ASD-ISM and PCI-DSS as reference points. The result is meant to feed a security roadmap that ranks projects by business risk, so money goes first to the problems that matter most. Advisory services also cover auditing, regulation, governance and compliance.

Improving the whole position

For organisations that want to raise their overall position, the firm offers a security improvement service. It is described as a set of services chosen to fit each client, including penetration testing, security audits, onsite inspections and compliance advice.

Running security for a client

Enterprise support and managed professional services are offered for clients who do not want to spend their time on security operations. The firm says it treats a client's network as if it were its own, whether planning, building and operating it or supporting an internal team. It also designs, deploys and configures a range of security technologies, drawing on the many technology partners it has worked with over the years.

When a breach has already happened

Incident response is a separate strand. The firm lists digital forensics, planning for incidents and rapid emergency callouts, all aimed at limiting the damage from a data breach. Cyber security training is also part of the range.

Experience and credentials

Its previous site claimed the firm had more than eight hundred clients, with experience in finance, education, government, health care, insurance, retail and technology. It also pointed to staff holding industry qualifications, among them ISO 27001 and OSCP. The current site title now describes cybersecurity, AI, cloud and integration services in Australia.