Luc Delpha
Partner | Lead Security Rating
#Activator
The premise of the Security Rating is to produce a score that represents an organization’s cyber security performance and maturity through an automated, continuous and repeatable assessment based on publicly observable data.
Is the Almond Security Rating right for you?
Are you an insurer or an auditor?
You will benefit from a confidence measure to offer the best coverage to your customers and prospects while providing value and a powerful sales tool.
Are you a company?
You will know how your customers, your insurer or cyber criminals view your organization’s cyber security maturity and you will be able to assess the risks related to your partners and subcontractors.
Are you an investor?
You will be able to assess the cyber maturity of your investments and perform an industry benchmark by evaluating the risks associated with them.
What makes the Almond Security Rating different?
-
We know how to evaluate the security maturity of all organizations (including SMEs)
-
We offer pragmatic and accessible solutions to correct issues that impact your real and perceived cyber maturity (*)
-
Our solution is affordable.
-
Our SecurityRating does not make wild extrapolations” to assess certain risks in an automated way.
-
We can perform a one-time rating and/or a continuous monitoring of a company with a daily update of the rating.
-
We offer several levels of evaluation allowing us to adapt the depth of the evaluation to the company’s objectives.
(*) As all rating systems on the market are based on similar technical tests, our evaluation and recommendations will allow you to situate yourself and improve your rating on all systems.
How does the assessment work?
It is very simple, fast and entirely done through our secure portal:
-
You request through our web portal the assessment of your organization or a company that interests you and choose the desired depth of assessment (materialized by an assessment level).
-
Our experts map the online presence of the company to be assessed and, if the level you requested allows it, we make this map more reliable by interacting with a contact.
-
Our technical platform performs all the automated assessment tests and prepares a full report.
-
For more advanced levels, we supplement this automated technical assessment with two questionnaires and / or more in-depth technical tests carried out by our experts.
-
The detailed results of the assessment with our recommendations are published in our portal, in a report that can be updated automatically every day.
What will you find in a Security Rating report in details?
The report is available online on our secure portal for the applicant (and also for the evaluated company from the Gold subscription). The applicant has access to the entire assessment, with some technical elements and details of security events displayed only to the company being assessed.
What assessment levels are available?
> GOLD recommended for vendors requiring a standard assessment
> PLATINUM recommended for vendors requiring a more detailed assessment
DISCOVERY
Free
- First self-assessment, on a part of the scope
- Simplified report including some recommendations
GOLD
€1500
- Mapping of the public part of the target perimeter
- Fully automated external technical assessment
- Detailed report including our recommendations
- Update of the score for 1 year
PLATINUM
€1800
- Mapping of the public part of the target perimeter
- Fully automated external technical assessment
- Detailed report including our recommendations
- Update of the score for 1 year
- Online Cyber self-evaluation questionnaire
- Optional customized questionnaires and / or GDPR questionnaire
- Questionnaires can be:
– Generalist
– GDPR
– Dedicated and customized
They additionally support free text and will accept evidence deposits.
DIAMOND
€3800
- Mapping of the public part of the target perimeter
- Fully automated external technical assessment
- Detailed report including our recommendations
- Update of the score for 1 year
- Online Cyber self-evaluation questionnaire
- Optional customized questionnaires and / or GDPR questionnaire
- Extensive tests performed by our experts giving more confidence in the evaluation of certain risks (phishing campaign, email chain)
- Optional, face-to-face audit with interview and document review for maximum confidence in the assessment
- Optional update of the mapping and questionnaires
