Snapshot of skills and competence of CERT-In empanelled Information Security Auditing Organisation

  1. Name & location of the empanelled Information Security Auditing Organisation : ProMinds Consulting Pvt Ltd, Hyderabad

  2. Carrying out Information Security Audits since : 2006

  3. Technical manpower deployed for information security audits :
    CISSPs : 1
    BS7799 / ISO17799 / ISO27001 LAs : 3
    CISAs / CISMs: 2
    DISAs / ISAs : 1
    Total Nos. of Technical Personnel : 9

  4. Outsourcing of information security auditing work to external Information Security Auditors / Experts : No

  5. Information Security Audit Tools being used (available, installed and licensed) :
    Freeware : 40
    Commercial : 5
    Proprietary: 0
    Total Nos. of Information Security Audit Tools : 45
    (Click here for details of the information security audit tools)

  6. Information Security Audit Methodology : Own, COBIT, ESA, OCTAVE

  7. Information Security Audits carried out so far :
    Govt. : 0
    PSU : 0
    Private : 6
    Total Nos. of Security Audits : 6

  8. Business domains of auditee organisations : IT, ITES, BPO, Healthcare, Financial, Banking, KPO

  9. Typical applications in use by auditee organisations : Client-Server, Web Applications, ERP, Database, Office Applications, Software Development Tools, Testing Tools,

  10. Bandwidth available with an auditee organisation having most complex network :
    Internal Bandwidth (LAN / Intranet) : 1 Gbps
    External Bandwidth (WAN / Internet) : 2 Mbps

  11. LAN infrastructure details of an auditee organisation having most complex network :
    No. of Computers : 200
    No. of Servers : 18
    No. of Switches : 10
    No. of Routers : 4
    No. of Firewalls : 3
    No. of IDS' : 3

  12. Ability to carry out vulnerability assessment and penetration test : Yes

Key : NA = Not Available (data not provided by the CERT-In empanelled Information Security Auditing Organisation).