Technology Risk Management (TRM)

Sidat Hyder Morshed Associates (SHMA) is a well-established management consulting, technology services, outsourcing practice and professional service firm in existence since 1986, with over 20 years of combined experience. Our key strengths are our people, methodology, technology and knowledge. Our people enable SHMA to be a leader among the professional services organizations in delivering the solutions that are important to our clients.

SHMA’s Technology Risk Management (TRM) practice is one of the leading providers of information security consulting services. We have established a reputation of providing top notch information security consultancy to industry leaders. Our client list includes companies across verticals such as banking and financial services, telecom, manufacturing, multinationals, government entities and other leading local organizations.

Our consultants possess the requisite industry trainings / certifications, and comprise wide range of skills encompassing different technologies and environments. Our professionals have extensive experience with information security protection, system security planning, information security assessments and implementation, security program development, and strategic technology planning. We incorporate industry standards such as the ISO 27001, BS25999, BS20000, CoBIT, OCTAVE, ITIL and others in adopting a process-based approach when delivering our services.

Over the years, we have made significant efforts to develop a team of experienced and certified consultants having CISA, CISM, CISSP, ISO27001 certifications to provide our clients with value delivery and high quality of service.

Services currently offered by Technology Risk Management (TRM) practice:

Professional Services

• Information Security Policy & Procedures Development
• Business Continuity Management
• Risk Assessment and Management
• Information Security Gap Analysis
• IT Security Architecture Development
• IT Governance Consulting

Compliance & Implementation Services

• BS 25999-2:2007 – Business Continuity Management
• ISO / IEC 27001:2005 (BS7799) – Information Security Management System
• ISO/IEC 20000-1:2005 – Information Technology Service Management System
• COBIT Assessment & Implementation

Audit & Assurance Services

• Information Systems Audit
• Information Security Audit
• Penetration Testing / Ethical Hacking
• Network Security Assessment
• Internal Audit Outsourcing
• Forensic Analysis