Secure economic flows
Economic flows are the lifeblood of our modern society. Attacks can have dire consequences for society, its citizens and businesses. Combitech protects both the flows and the infrastructure.
Cybercrime is a reality
It’s a sad fact that companies and institutions that handle money need to expect exposure to all forms of known and unknown cyber threat. In light of these complex and challenging conditions we need to have a security organization in place to ensure stable transaction flows, strict customer confidentiality, functioning crisis management and protection of infrastructure.
Combitech provides protection in a global economy
Combitech is highly experienced as a security partner to banks, commerce, gaming companies and other operators with significant monetary responsibility. We help our customers secure flows and infrastructure by continually analysing risks and vulnerability, carrying out security audits in various forms and offering services that help operators comply with laws, regulations and industry requirements.
We help you establish a security culture
One key factor in preventive security work is the people in your organization. We help you throughout the entire process, from risk analysis and continuity planning, to employee training in crisis management. With Combitech as your partner, you will establish a security culture in which each individual has the right knowledge and a high level of security awareness. This generates confidence.
Interested? Click on the headings below.
Here to help
-
Crisis preparedness
Crisis preparedness
When financial operators or business owners with substantial economic interests are exposed to threats or affected by crises, crisis management mechanisms need to kick in swiftly and correctly to minimize both internal and external damage.
A threat or a crisis that hits one or several operators in the financial system can spread like wildfire. Similarly, events that affect a retail chain or a gaming company can have a severe impact on relationships with customers, business partners, suppliers and other stakeholders.
Combitech can provide experts in crisis preparedness and crisis management at several locations across Sweden. These experts have considerable experience supporting financial organizations and businesses in the work of analysing risk and vulnerability and carrying out impact studies, as well as continuity planning and implementing the measures required to guarantee an organization’s crisis management ability, both internally and in relation to its operating environment.
Regular training and exercises contribute to the long-term establishment of a security culture in which risk awareness and crisis management capability are natural elements.
Service areas
- Operations analysis
- Needs analysis
- Process management and support
- Training
- Risk and vulnerability analyses
- Continuity planning
- Crisis management techniques
- Crisis communication
- Media training
- Crisis and contingency plans
- Crisis management exercises
- Post-incident investigation and analysis
- Methodology support for evaluation
- Security culture
- Security protection
-
Governance and compliance
Governance and compliance
There are various ways of preventing criminal activity such as money laundering, manipulation of hardware and cybercrime. The fundamental requirements are strict control and regulatory compliance, organized audit work and high risk awareness among the employees in your organization.
For businesses that are dependent on functioning economic flows and safe infrastructure, there is no scope for compromising when it comes to security. Because they need to maintain customer confidence and because laws and regulations need to be complied with, such as PCI and AML.
With Combitech as your strategic security partner, you will be creating conditions for effective, profitable and organized work on control and compliance. As part of this work we will help you identify and assess both risks and opportunities. Using tools such as situation analysis and GAP analyses, we measure compliance against standards and regulations such as PCI. We also establish strategies and management systems such as ISO 27001.
In your business, we implement programmes to raise security awareness and add key skills that are either missing or need to be strengthened. And, naturally, we plan and provide training in risk management and continuity.
Service areas
- Security awareness/security culture
- Social engineering
- GAP analyses, 27001, 22301, GDPR
- Anti-money laundering – assessment and process
- Fraud risk assessment
- PCI audits
- Implementation of management systems and processes
- Strategic governance and management
- Training
- Continuity planning
- Hiring of CSO, CISO, DPO
- Information classification
-
Secure transactions
Secure transactions
Every day, millions of consumers put their trust in various payment systems. Most people don’t realise that the card payment is just one of several transactions in a complex flow. Over more than 30 years, Combitech has established a unique position within secure transactions in the Nordic region.
Combitech Secure Transactions is a comprehensive concept based on a high degree of proficiency within various payment forms, combined with cyber security at an overall level. We provide expertise and services at all stages of the payment flow, so that customers at all levels can feel confident in the services and products they use. Our customers operate primarily in the banking and finance market, as well as in commerce and other sectors with extremely high standards regarding secure and reliable transaction flows.
We carry out requirement-based audits of everything from source codes to hardware modules. We also offer concepts such as secure card payments, key control and source code deposits in a secure environment. We factor in business intelligence as part of our work, along with aspects that may affect your business, such as changes to requirements and new payment models.
Service areas
- Contactless transactions
- PCI implementation and audit
- Secure card payments
- Key control
- PIN codes
- Hardware security modules (HSM)
- Chip payments (EMV)
- Card terminals (PED)
- Source code deposits (ESCROW)
- Security objectives
- IT security architecture
- Code review
- Penetration testing and vulnerability analysis
- MSS security surveillance
- Training
