Services

Information Security Management Consultancy

What do we provide?

While helping you to implement a proper ISM system, we go over the full spectrum of all relevant security topics and systemise the day-to-day security-related activities. As a basis, we are ready to choose ISO/IEC 27001, Estonian security standard E-ITS, CIS controls or whatever is needed. You could also let us know if you need help with just one specific security area or project, such as:

Becoming GDPR-ready from the side of the technical controls
Preparing for a security audit
Improving access management
Hardening system configuration.

Let us know about any seemingly complicated challenges, and the solution may be closer than expected.

Information Security Audits and Assessments

Web and Mobile Application Penetration Testing

What do we provide?

Like any other security testing or assessment should be based on a well-respected methodology. Therefore, we deliver:

Web application and API penetration testing based on OWASP ASVS (Application Security Verification Standard)
Mobile application penetration testing based on OWASP MASVS (Mobile Application Security Verification Standard)

A comprehensive report containing:

High-level executive summary
Detailed technical descriptions of found vulnerabilities
Risk ratings
Recommendations for problem resolving and additional links to external materials

Business Continuity Management Consultancy

Business Continuity Audits and Assessments

Information Security Trainings

AWS Security Assessment

What do we provide?

To look behind every corner in the AWS environment, we like to lean on a comprehensive methodology. Therefore, we deliver AWS cloud environment security assessment based on CIS Amazon Web Services Foundations Benchmark focusing on topics like (but not limited to):

Identity and Access Management (IAM)
Simple Storage Service (S3) and Elastic Compute Cloud (EC2)
Networking
Logging and Monitoring
Simple Notification Service (SNS)
Infrastructure as code (IaC) quality and security assessment

The detailed assessment report contains:

High-level executive summary
Detailed technical descriptions of found vulnerabilities
Risk ratings
Recommendations for problem resolving and additional links to external materials

Site Reliability Engineering

Team

Lea Hriciková

Our business continuity, risk and information security management expert and enthusiast will provide you adequate picture of the current situation and realistic solution

ISO/IEC 27001 SLA (Certified ISO/IEC 27001 Senior Lead Auditor, Certification no ISSLA1009264-2023-04)
ISO/IEC 27005 SLRM (Certified ISO/IEC 27005 Senior Lead Risk Manager, Certificate no ISRMSLM1009264-2024-04)
ISO 22301 SLI (Certified ISO 22301 Business Continuity Management System Senior Lead Implementer, Certification no BCIM1009264-2025-01)
ISO 22301 LA (Certified ISO 22301 Business Continuity Management System Lead Auditor, Certificate no BCLA1009264-2025-01)

Contact

SecTeam OÜ

Reg.no: 12434689
VAT no: EE101797432
Email: [email protected]
Tel: +372 520 5558
Address: Vabaduse pst 174b, 10917 Tallinn, Estonia
PGP: C516 FAFC 3120 C34A F6A1 5EE8 2D36 04D9 31F6 7CCC