
Internal Security Audit
IT staff and business owners must stay ahead of increasing threats by hackers and insiders.
Internal Security Audit
The Problem: Controls Are Not Followed or Updated for New Threats
Most organizations now have security procedures and policies in place. One critical factor in the success of the security procedures and policies is how well they are being followed. Another critical factor is how often they are updated to cover new technologies and threats. Some of the reasons internal security must be regularly updated are:
- New threats are identified and new technologies created all the time

- Privacy laws exist in 50 countries and new laws are being created
- Data lost to employees can be just as damaging as data lost to outside hackers
- Mobile devices and social media are growing avenues for hacker access
- It takes one year to restore an organization’s reputation after a data breach¹
- The average loss in brand value after a breach is hundreds of millions¹
The Solution: Mercury Group Uganda Internal Security Audit
MGU’s Internal Security Audit is designed to identify data security and privacy risks and weak policies and controls. The audit is conducted both on- and off-site and covers a broad range of security checkpoints, including a review of the Active Directory, network security, data security, data access, hardened passwords, security polices, PC policies, server policies, and USB drive policies.
Mercury Group Uganda will review your policies and practices and then provide recommendations for the proper courses of action for any required improvements or additions.
1. “Fortifying your defenses – The role of internal audit in assuring data security and privacy,” PriceWaterhouseCoopers LLC, http://www.pwc.com/us/en/risk-assurance-services/publications/internal-audit-assuring-data-security-privacy.jhtml
External Intrusion and Penetration Testing
Today penetration testing (pen testing) is one of the most important investments that you can make to protect your network.
The Problem: External Intrusion and Penetration
External intrusion and penetration is one of the silent stalkers on the Internet. External hackers can penetrate your network and not leave a trace that indicates they have stolen your intellectual property or private information. In fact, they can render your computers and network completely useless without your knowledge.
Penetration from the outside can result in loss of intellectual property, identity theft, and data theft to loss of network control. Sadly, the way the laws are written make your company responsible for damages resulting from these security breaches.
Statistically there is a very good chance that your outward-facing IP addresses are being scanned right now and are secretly susceptible to unwanted penetration. You may be the low-hanging fruit that they are looking for.
There are thousands of methods that hackers use to penetrate your network, including DDOS attacks, SYN-FIN attacks, Port 0 attacks, SQL injections, Heartbleed attacks, and forbidden site attacks…the list goes on and on.
The Solution: Mercury Group Uganda Vulnerability Analysis
Mercury Group Uganda will run extensive vulnerability analysis on your outward-facing IP addresses to determine what weaknesses exist and what routes external hackers can use to obtain access to your computers, networks, and data.
- This analysis is non-invasive and we do not have to be onsite to perform the tests.
- A component of this analysis includes PCI compliance testing to also ensure that your network is PCI compliant.
- We will provide you with hard copy reports listing all security weaknesses.
Mercury Group Uganda’s analysis will pin-point all external weaknesses that exist for your outward-facing network. If we locate any weaknesses, we can recommend solutions to close your security holes.
We know this is important to you — send us a mail and we will get back you to immediately with a quote to perform your comprehensive penetration testing and review.
Make sure your organization doesn’t get hacked or pre-attacked! Contact Mercury Group Uganda at This email address is being protected from spambots. You need JavaScript enabled to view it. . We are here to ensure that your data, systems, and entire network are secure.
Below is an example of a vulnerability found in one of our actual scans.

Network Security Services
Protecting your Network is Critical for Your Business.

Network Security Services
In this day in age it’s important to make sure that your customers’, employees’ and your own information is safe and secure from unwanted intruders in order for your business to run successfully. Mercury Group Uganda provides network security services so that you can protect your computer network(s). This includes threat detection, analysis and prevention to protect your network(s) from attacks and penetration at all levels, even levels that you may not know exist. Our services include auditing, review, consulting, and solutions in the following areas:
External Intrusion and Penetration Testing
Internal Security
Web Browser Security
Anti-Virus and Anti-Malware Security






Click Here