Assurance of the technological assets that make up all the business units of San Vicente Fundación through the application of the NIST standard, Pentesting to the different web applications of San Vicente Fundación, malware analysis and pre-production developments, management of the life cycle of vulnerabilities.
Major achievementIndependence of the information security area from the ICT area, with the objective of establishing a policy and authority for the assurance of all the technological means of the business units that make up the San Vicente Foundation.
Vulnerability analysis for the Grupo Bancolombia project as a strategic ally, performing host assessment functions, host asset management, creation of host assessment reports, user account management, immediate risk analysis for remediation, agent installation in different OS, adjustments in the controls of the audit files of the CiS standard in order to evaluate the baseline policies, using the Tenable scanner.
Major achievementScope at the network level of all the assets of the Bancolombia group for the management of the vulnerability life cycle.
Vulnerability analysis for the SOC project of Bancolombia and banks in the Banistmo, Banco Agrícola and Banco Agromercantil regions, host assessment functions, host asset management, host assessment report creation, user account management, analysis of the immediate risk for its remediation, management of controls and compliance policies for different operating systems, vulnerability scanning for web apps using Qualys.
Major achievementOptimization of the attention of the requests for vulnerability analysis and baseline, it is possible to have access at the level of control policies to database instances.