Uncategorised
- Details
- Written by Saša Dobo
- Category: Uncategorised
- Hits: 7329
Our team consists of experienced experts in the field of standard implementation which require thorough solutions, all team members proved their competences and have completed training in order to be capable of adequately understanding, implementing and maintaining solutions in accordance with the requirements of a large number of standards.
GSC Team
We have created a wide-range network of consultants, partners and partner organizations – a network characterized by multidisciplinary and experience, expertise in a variety of different standards that, for the benefit of our clients, cooperate with each other on joint projects. The basic GSC team consists of:
The entire network of GSC consultants and partners counts a few dozen colleagues and several partner organizations, but this does not mean that we are not always open to new cooperation and partnerships. If you want to become part of the GSC team, or you have an idea of possible cooperation, feel free to contact us by contact form.
We are a team made up of professional, experienced and motivated individuals who love their profession.
- Details
- Written by Saša Dobo
- Category: Uncategorised
- Hits: 4426
The Millennium Efforts of the European Parliament and the Council of the European Union to establish a new legal framework regulating the problem of processing personal data of citizens of the European Union and the free movement of such data have led to the creation of the General Data Protection Regulation (abbreviated GDPR)
The GDPR requires that any organization that processes data of citizens of the European Union (but also all non-EU citizens, but only reside within its frameworks) in order to comply with the new rules on personal data protection.
Whether you are just new in the field of GDPR or you are dealing with the issues relevant to GDPR since its publication, whether your organization is preparing to approach the implementation of solutions that are compatible with the requirements of GDPR or have already done so - our consultants and the network of our partners and partner organizations will help you to adequately respond to the challenges ahead of you.
* A multilingual version of the General Regulation on the protection of persons with regard to the processing of personal data and the free movement of such data and the entry into force of Directive 95/46 / EC is available on this link.
Our GDPR consulting services include:
1. Gap analysis of compliance of your business with the applicable GDPR requirements and the development of a comprehensive compliance report in accordance with the findings of the gap analysis
2. Implementation of applicable GDPR requirements in your business through the establishment and implementation of appropriate processes and the production of necessary documented information.
3. Preparation of the necessary documentation in the form of standards and recommendations according to the GDPR regulations
4. Programs for improvement of the existing implemented solutions (relevant gap analysis of existing solutions and recommendations for general improvements, assistance in the improvement of specific processes, tools, techniques and other solutions, training and presentation with the aim of raising awareness about general or individual areas from domains relevant to GDPR and training on the implementation of individual solutions (on the whole offer of training more in the section: training), etc.).
5. Creation and implementation of individual documents, processes, tools, techniques, and other solutions, at the request of the client.
6. Full consultative support on issues related to GDPR and its application
- Details
- Written by Saša Dobo
- Category: Uncategorised
- Hits: 3490
Each waste producer carries with it the responsibility of waste management, which includes certain obligations.
The Law on Waste (Official Gazette RS, No. 36/2009 and 88/2010) clearly defines, among other types, waste classification, waste management planning, waste management entities, as well as responsibilities and obligations in waste management.
The owner of the waste, i.e. the operator, is obliged to classify the waste in the prescribed manner and submit reports to the Agency in accordance with the law. The Law on Waste Management foresees a fine of 1,500,000 to 3,000,000 dinars in cases where companies do not perform operations in accordance with the waste management plan. Criminal measures include the prohibition of performing certain economic activity, and for the responsible person in question a prohibition of performing duties for up to ten years.
Our experienced lecturers have created a training program that will enable you to develop your individual, team and organizational competencies to enhance the knowledge and skills of your employees and/ or partners of your organization and enable them to best suit themselves for business challenges in related waste management and environmental protection.
- Details
- Written by Saša Dobo
- Category: Uncategorised
- Hits: 4393
More than two decades ago, the International Organization for Standardization (ISO) recognized the added value that will, for global organizations, create compliance with the requirements of a large number of standards. It is this exact vision of the world in which different organizational aspects are aligned with the best world practice and, in general, the perspective of understanding standards as the “best world practice” – this has further guided us to approach consultancy activities from a starting point of a wide-ranging network of experts from a multitude of different expertise, which, for the benefit of the client, work together with one another on joint projects.
We firmly believe that the future lies in standard implementation. As we sincerely believe that a large number of requirements of many different standards can be better implemented with a good network of experts from various industries, who are united over common responsibility. When we say this we are not solely referring to broader expertise, less risks in achieving goals and respecting set deadlines, the support that each of our projects receive from the entire GSC network, and other general benefits of our work, but also the ability of the Global Standards Consortium to adapt to specific requirements of their clients.
Work consistency and the Global Standards Consortium mission
Sometimes it’s hard to reach an answer. Then again, sometimes the answer to key issues is known, even obvious, this is when the challenge becomes not to reach an answer, but to find the best way to behave in accordance with it. And to stay consistent.
Our mission is based on our commitment to provide our clients with consulting services and relevant training, primarily in the domain of standards and related models, with which we will achieve beforehand, agreed outcomes. In doing so, we will continually develop our own competencies, as well as the competences of all our partners and clients we cooperate with. In addition, making sure that all demands of all parties involved are met, nurturing the culture of flexibility and increasing the level of readiness in order to adapt together to all the changes that we are facing on a global level.
“Young and Old” and the vision of the Global Standards Consortium
One of the most frequent phrases used to describe us is – they are a young and old organization. This antithesis points to the peculiarity of the Global Standards Consortium team, which has from its very creation, brought together partners who combined have several decades of experience and hundreds of implemented projects in connection with the establishment, implementation and/or the improvement of variety of systems, models and standards from their field of expertise, as well as relevant training in relation to those areas which clients wanted to conquer or improve in.
Apart from accurately describing us as being both “Young and Old”, the title has further inspired us and directly affected the Global Standards Consortium vision to become an organization that is widely recognized for its consistency in applying globally recognized standards, models and training in accordance with the client’s requirements.
We are a team made up of professional, experienced and motivated individuals who love their profession.
- Details
- Written by Saša Dobo
- Category: Uncategorised
- Hits: 3442
Penetration testing is the process of assessing and evaluating relevant systems and protocols, in order to identify their vulnerabilities and weaknesses, from the perspective of anonymous and non-privileged users (attackers) who intend to harm our system or network.
Our consulting services from the domain of penetration testing include:
1. Verification of penetration testing, ethical hacking of electronic information systems.
2. Advisory services for solving the problems identified and removing the observed weaknesses.
3. Compilation of reports on the risks of breakthrough of the IT system (if necessary: periodic reports and repeated tests after the implementation of recommendations)
4. Programs for improvement of existing applied solutions (interviews with employees and testing of their resistance to unwanted manipulation, assistance in improvement of specific processes, tools, techniques and other solutions, training and presentation with the aim of developing awareness and alertness about possible attacks and training on application of individual solutions (on the whole offer of training more in the section: training), etc.).
5. Full consultative support and cooperation in the field of security of the IT system.
Who are our clients?
The most common users of consulting services regarding penetration testing are:
|
• All companies involved in payment cards, banks and other financial institutions |
|
|
• Organizations dealing with private (protected) personal data bases |
|
|
• Organizations from the domain of Internet entrepreneurship |
|
|
• Suppliers of IT/ ICT services |
|
|
• All organizations that need an evaluation of applied solutions that penetration testing can identify |
|
|
• All organizations that have potential vulnerabilities that can be analyzed and improved on the basis of penetration testing |
|
Characteristics of our approach to penetration testing
- We check the security of internal (workstations, servers, network devices) and external (publicly available services and servers) of the system, then check the safety of the Internet, desktop and mobile applications and services, wireless communication systems. We pay particular attention to checking the risk of harmful breakthroughs in the field of human resources and the risks arising from defective internal procedures and rules.
- We know black, gray and white hat approaches
- We create our own test tools, at the client's request, which gives the client a unique insight into the security of their own systems, thanks to our way of creating a tool based on reverse engineering.
- We have our database of unpublished vulnerabilities, extensive experience in using Open-source Intelligence Tools (OSINT) of the widest applications available, contributing to the OWASP foundation with tools and lectures, we have specially prepared configurations for breaking common types of encryption.
