Architecture

Threat and risk management is the foundation for information security. Enterprises must conduct regular risk assessment, threat identification, risk analysis and risk treatment. The following process is a reference for threat and risk management.

Threats can be identified with a traffic threat detection platform, a log audit and analysis platform; Vulnerabilities can be identified with questionnaire survey, interview, vulnerability scanning, penetration test and other methods. ECCOM provides security services such as asset sorting, vulnerability scanning, penetration test, risk analysis, etc. during risk assessment, assist organizations to promote risk assessment, and recommend the most appropriate treatment strategy.