itrust consulting s. à r. l.

itrust consulting s. à r. l.

Speciality: Comprehensive Network and System Penetration Testing

Niederanven, Luxembourg 8 employees
Visit Website View on LinkedIn
[01] About
itrust consulting has become a recognised and trustworthy actor in the Information Security field in Luxembourg and even throughout Europe. The SME’s name is the acronym of “Information: Techniques and Research for Ubiquitous Security and Trust”. itrust consulting helps clients coming from public, financial, and private sector to protect their information against any divulgation, manipulation or unavailability, with consulting (SECurity-as-a-Service), auditing, innovation and training services. Audit (Security-as-a-Service) services: -Organisational audits: ISO 2700x, ISO 20000, ISO 27799, IEC 62443, internal referentials etc... -Technical audits: Code reviews (e.g.: OWASP), vulnerability and penetration tests, protection of critical infrastructures, Wi-Fi security, protection des personal data, PCI-DSS, Common Criteria, CSSF compliance, SCADA, privacy etc... Consulting services: -Assistance to security implementation (ISO 27001, ISMS, PolSec etc...) -Project management -Design of secure infrastructures -Technical studies (PKI, VoIP, virtualisation etc...) -Technology migration (Microsoft, PKI etc...) -Risk analysis based on itrust tool: TRICK Light -Assistance in the development of secured applications -Forensics analysis malware.lu CERT: itrust consulting operates the first privately owned CERT in Luxembourg offering the following service: -ODMAS (on-line malware analysis service). -pentest -Forensics Fields of expertise: Critical Infrastructure Protection (finance, energy, health, industry etc...), e-banking, web applications, PKI, systems and networks, IT governance, personal data protection, SCADA, ISMS, risk analysis etc...
[02] Services
Security System Implementation
IT Audits
Vulnerability Scanning
Penetration Testing
Vulnerability Assessments
Compliance Audits
Awareness Campaigns
Training For Security Professionals
Incident Response
Malware Analysis
Consulting
Risk Management
Security Solutions For ICT
[03] Certifications
ISO/IEC 27001

ISO/IEC 27001: Information Security Management System Certification


Origin


ISO/IEC 27001 was developed jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), first published in 2005 and most recently updated in 2022. It evolved from the British Standard BS 7799, which was created in the 1990s by the UK government and industry experts to address growing information security concerns. The standard was developed to provide organizations with a systematic framework for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS), helping them protect sensitive data in an increasingly digital business environment.


Industry Value and Importance


ISO/IEC 27001 is globally recognized as the gold standard for information security management, valued because it demonstrates an organization's commitment to protecting confidential information through risk-based controls and continuous improvement. The certification is particularly important for organizations handling sensitive data, as it helps them comply with legal and regulatory requirements, win contracts (especially with government entities and large enterprises), and build customer trust. Many industries require or strongly prefer vendors with ISO 27001 certification, as it provides independent verification that appropriate security controls are in place, reducing the risk of data breaches and ensuring business continuity in the face of evolving cybersecurity threats.
[05] Notable Clients
  • Luxembourg Public Sector
  • European Public Sector Administrations