Assurance \u2022 Compliance Assessment<\/p>\n<\/div>
Developing or Refining Frameworks, Architecture, Policies and Guidelines for Cryptography<\/p><\/h2><\/div><\/div><\/div>
![](\"https:\/\/firmussec.com\/sg\/wp-content\/uploads\/2023\/10\/Untitled-design-33.png\" "\\"Untitled")
<\/span><\/div><\/div><\/div>As computing power increases, the cryptography algorithm and controls must also be coherent with the evolution of computing power. Robust key management processes should be in place to preserve trust in the last line of defence. \u201c Confidentiality, Integrity and Availability are different things and require different methods in cryptography.<\/p>\n
FIRMUS offers assessment services including gap analysis and compliance status with respect to different compliance guidelines and accepted best practices from different countries.<\/p>\n<\/div>
MAS TRM Guidelines<\/h2><\/div><\/div>\n\n- 6.1 \u2013 Crypto in Secure Coding<\/li>\n
- 10.1 \u2013 Algorithm and Protocol<\/li>\n
- 10.2 \u2013 Key Management<\/li>\n<\/ul>\n<\/div><\/div><\/div>
BNM RMiT<\/h2><\/div><\/div>\n\n- 10.16 \u2013 Policy & Procedures<\/li>\n
- 10.17 \u2013 Roles & Responsibilities<\/li>\n
- 10.18 \u2013 Third Party Dependencies<\/li>\n
- 10.19 \u2013 Control<\/li>\n
- 10.20 \u2013 Certification Authority<\/li>\n
- 10.51 & Appendix 10: Cloud Key Management<\/li>\n
- Appendix 9 \u2013 Supervision<\/li>\n<\/ul>\n<\/div><\/div><\/div>
SC Guidelines on TRM<\/h2><\/div><\/div>\n\n- 7.19 \u2013 Controls<\/li>\n
- 7.20 \u2013 Policies and Procedures<\/li>\n
- 8.09 & 8.11 \u2013 Cloud Key Management<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Our Methodology<\/h2><\/div><\/div><\/div><\/i><\/div>STAGE 1 - SCOPE AND PLAN<\/h3><\/div><\/div>\nConfirm Scope
<\/div><\/div>\nPlan Project Schedule<\/p>\n<\/div><\/div><\/div><\/div><\/i><\/div>STAGE 2 - ASSESS<\/h3><\/div><\/div>\nDocument and Record Assessment<\/p>\n<\/div>
<\/div><\/div><\/div><\/i><\/div>STAGE 3 - REPORT<\/h3><\/div><\/div>\nESP Assessment Report
<\/div><\/div>\nESP Declaration<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/i><\/div>STAGE 1 - SCOPE AND PLAN<\/h3><\/div><\/div>\nConfirm Scope
<\/div><\/div>\nPlan Project Schedule<\/p>\n<\/div><\/div><\/div><\/div><\/i><\/div>STAGE 2 - ASSESS<\/h3><\/div><\/div>\nDocument and Record Assessment<\/p>\n<\/div>
<\/div><\/div><\/div><\/i><\/div>STAGE 3 - REPORT<\/h3><\/div><\/div>\nESP Assessment Report
<\/div><\/div>\nESP Declaration<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>Cryptography Consultancy<\/p><\/h2><\/div>
Based on international standards such as NIST, AICPA, IETF, ISO etc, Our services in cryptography consultancy assists organisations to build the framework, policies, guidelines and architecture for cryptography best practices.<\/p>\n<\/div>
![](\"https:\/\/firmussec.com\/sg\/wp-content\/uploads\/2023\/10\/Capture.png\" "\\"Capture\\"")
<\/span><\/div><\/div><\/div>Solution Offerings<\/p><\/h2><\/div>
Cryptography Keys are best managed with proper tools and solutions. We offer Key Management Solutions which include:<\/p>\n
\n- Cipher Trust Manager<\/li>\n
- Data Security Manager<\/li>\n
- Cipher Trust Cloud Key Manager<\/li>\n
- Enterprise Key Management<\/li>\n<\/ul>\n
For organisations which have various uses of cryptography e.g. ikeys in machine identity and are dealing with external and internal cryptography trust services providers, our suite of solutions will automate the process of certificate lifecycle management thus greatly easing the burden on human resources due manual processes in addition to a reduction in risk of human error.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div><\/div>Explore Our Compliance Assessment Services<\/h3><\/div>Let us help you make informed decisions and set your business up for success through our range of compliance assessment services.<\/p>\n<\/div><\/div><\/div>
<\/i><\/div>External Service Provider (ESP) Cyber Security Risk Assessment<\/p><\/a><\/div><\/div><\/div>
<\/i><\/div>Security Compliance Assessment (BNM\/MAS\/MCMC)<\/p><\/a><\/div><\/div><\/div>
<\/i><\/div>SWIFT Security Assessments<\/p><\/a><\/div><\/div><\/div>
<\/i><\/div>SC Cyber Risk Guidelines Assessment<\/p><\/a><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div>\nTalk To Us<\/h2><\/div><\/div>Penetration testing, cyber security strategy, proof-of-value, or just some information? Our domain experts provide bespoke cyber security offerings to solve your digital transformation challenges.<\/p>\n<\/div>
- \n
- 6.1 \u2013 Crypto in Secure Coding<\/li>\n
- 10.1 \u2013 Algorithm and Protocol<\/li>\n
- 10.2 \u2013 Key Management<\/li>\n<\/ul>\n<\/div><\/div><\/div>
BNM RMiT<\/h2><\/div>
<\/div>\n- \n
- 10.16 \u2013 Policy & Procedures<\/li>\n
- 10.17 \u2013 Roles & Responsibilities<\/li>\n
- 10.18 \u2013 Third Party Dependencies<\/li>\n
- 10.19 \u2013 Control<\/li>\n
- 10.20 \u2013 Certification Authority<\/li>\n
- 10.51 & Appendix 10: Cloud Key Management<\/li>\n
- Appendix 9 \u2013 Supervision<\/li>\n<\/ul>\n<\/div><\/div><\/div>
SC Guidelines on TRM<\/h2><\/div>
<\/div>\n- \n
- 7.19 \u2013 Controls<\/li>\n
- 7.20 \u2013 Policies and Procedures<\/li>\n
- 8.09 & 8.11 \u2013 Cloud Key Management<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Our Methodology<\/h2><\/div><\/div><\/div>
<\/i><\/div>STAGE 1 - SCOPE AND PLAN<\/h3><\/div>
<\/div>\nConfirm Scope
<\/div><\/div>\nPlan Project Schedule<\/p>\n<\/div><\/div><\/div><\/div><\/i><\/div>STAGE 2 - ASSESS<\/h3><\/div>
<\/div>\nDocument and Record Assessment<\/p>\n<\/div>
<\/div><\/div><\/div><\/i><\/div>STAGE 3 - REPORT<\/h3><\/div>
<\/div>\nESP Assessment Report
<\/div><\/div>\nESP Declaration<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/i><\/div>STAGE 1 - SCOPE AND PLAN<\/h3><\/div>
<\/div>\nConfirm Scope
<\/div><\/div>\nPlan Project Schedule<\/p>\n<\/div><\/div><\/div><\/div><\/i><\/div>STAGE 2 - ASSESS<\/h3><\/div>
<\/div>\nDocument and Record Assessment<\/p>\n<\/div>
<\/div><\/div><\/div><\/i><\/div>STAGE 3 - REPORT<\/h3><\/div>
<\/div>\nESP Assessment Report
<\/div><\/div>\nESP Declaration<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>Cryptography Consultancy<\/p><\/h2><\/div>
Based on international standards such as NIST, AICPA, IETF, ISO etc, Our services in cryptography consultancy assists organisations to build the framework, policies, guidelines and architecture for cryptography best practices.<\/p>\n<\/div>
<\/span><\/div><\/div><\/div>Solution Offerings<\/p><\/h2><\/div>
Cryptography Keys are best managed with proper tools and solutions. We offer Key Management Solutions which include:<\/p>\n
- \n
- Cipher Trust Manager<\/li>\n
- Data Security Manager<\/li>\n
- Cipher Trust Cloud Key Manager<\/li>\n
- Enterprise Key Management<\/li>\n<\/ul>\n
For organisations which have various uses of cryptography e.g. ikeys in machine identity and are dealing with external and internal cryptography trust services providers, our suite of solutions will automate the process of certificate lifecycle management thus greatly easing the burden on human resources due manual processes in addition to a reduction in risk of human error.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div><\/div>Explore Our Compliance Assessment Services<\/h3><\/div>
Let us help you make informed decisions and set your business up for success through our range of compliance assessment services.<\/p>\n<\/div><\/div><\/div>
<\/i><\/div>External Service Provider (ESP) Cyber Security Risk Assessment<\/p><\/a><\/div><\/div><\/div>
<\/i><\/div>Security Compliance Assessment (BNM\/MAS\/MCMC)<\/p><\/a><\/div><\/div><\/div>
<\/i><\/div>SWIFT Security Assessments<\/p><\/a><\/div><\/div><\/div>
<\/i><\/div>SC Cyber Risk Guidelines Assessment<\/p><\/a><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div>\nTalk To Us<\/h2><\/div>
<\/div>Penetration testing, cyber security strategy, proof-of-value, or just some information? Our domain experts provide bespoke cyber security offerings to solve your digital transformation challenges.<\/p>\n<\/div>