Strategic Consulting | AppSec Consulting

Strategic Consulting

AppSec Consulting specializes in providing strategic security services helping clients maximize their security and risk management investments. If your organization is in need of a risk assessment, remediation planning, or assistance standing up or improving an Information Security or Compliance Program, our staff of industry professionals can help. We understand one-size-fits-all is not the answer and every organization has different risks, drivers, and requirements that necessitate different solutions. We think outside the box and help you develop actionable solutions to meet your security goals and your budget.

We offer a variety of services ranging from small consulting engagements to staff augmentation, including the following:

IT Risk Assessment

Risk assessment services for clients who value true information security.

Security Program Development

Security program development for organizations of all sizes.

Security Program Project Management

Expert guidance and project management to get your security program off the ground or improve existing processes.

Strategic Remediation Planning

Strategic Remediation Planning services provide a roadmap to help you prioritize and address security and compliance issues.

Cloud/Service Provider Assessment

Provides you with the tools needed to ensure third parties are meeting your security and data protection requirements.

Security Policy/Document Development

Comprehensive and customized InfoSec policy development or documentation improvement for all types of organizations.

Find out more about how AppSec Consulting can help you with your Security and Compliance program.

Contact us

From the Blog

Who’s Managing your LAPS Implementation

Michael Becher / January 07, 2020

In May 2015, Microsoft released a password management tool to combat the rising abuse of encrypted passwords (which effectively became encoded when Microsoft released the key) stored in Group Policy Preferences, or worse, in cleartext scripts pushed via GPO. Every domain user was able to access these preferences and scripts in the ‘SYSVOL’ share and could obtain the single local administrator password for all machines on the domain, which would provide total lateral movement opportunities within the domain. The necessary problem here is that at least one user has to be able to see these LAPS passwords to administer the process. Who within your domain has this power? You might be surprised at how often this is overlooked, thus leading to the availability of all these passwords to more users than intended.