
Having clear enforceable policies protects the organisation as well as employees and directors.
Policies provide staff with guidelines, direction and outline responsibilities as well as demonstrate management commitment. Polices demonstrate to external bodies that the organisation is providing due care and taking IT Security and the associated risks seriously.
Shearwater provides services to review, or develop information security policies.

Standards such as ISO/IEC 27001 Information Management (previously AS/NZS 7799.2), Sarbanes-Oxley and others are increasingly more important.
Certifying to the standard or even just complying with the concepts outlined in the standards can be challange.
Shearwater has proven processes to help achieve an Information Security management environment compliant with the relevant standards.
A strategic plan sets out the path for a company with regards to Information Technology or Information Security.
Shearwater has the capabilities to develop strategic plans that comply with the NSW government guidelines or internal standards. Similarly we develop Information Security Strategic plans, Business Continuity and Disaster Recovery plans.
Service Orientated Architecture (SOA) is a shift in the way applications are delivered and how organisations interact. SOA is built using web services consisting of several technologies including XML, XSD and schema validation, SOAP, UDDI, WSDL, transport protocols. Each with security challenges. XML Security, XML firewalls and other application level controls are becoming more important.
Security awareness is one of the critical elements of maintaining a high level of security within an organisation.
Shearwater provides education on products, general awareness sessions, CEO briefings etc
Security Assessments help protect the environment by identifying gaps, vulenrabilities, weaknesses, and so on.
Shearwater provides
assessment services ranging
from simple vulnerability
assessments to full risk
assessments or security health checks.
Managing security is a specialist task. Not everyone has the timed or the resources to dedicate to this task. Shearwater provides a range of security management services.
In addition to managing security for your organisations Shearwater also provides Managed Services in partnership with Earthwave.