Governance, Risk & Compliance (GRC)

We supported multiple compliances. Worldwide major common name and industry standard supported by A & A Consulting presents e-ESM.

Bangladesh Bank ICT Guideline

The Bangladesh Bank ICT Guideline 4.0 is a set of regulations and best practices issued by the central bank of Bangladesh to ensure that financial institutions, particularly banks, comply with cybersecurity, IT governance, and operational risk management in their ICT (Information and Communication Technology) frameworks.

Cyber Security Framework

ICT Guidelines 4.0

Bangladesh Bank ICT Guidelines Dashboard Overview

CIS Controls (Center for Internet Security) Assessment

CIS Assessment

The acronym "CIS" can refer to several concepts depending on the context. Here are some common interpretations:

CIS - Center for Internet Security

CIS - Commonwealth of Independent States

CIS - Computer Information Systems

eESM Support 2 CIS Controls

CAI v4.0.3

CCM v4.0.12

ISO/IEC 27001 is an international standard that helps organizations manage the security of their information assets.

ISO Assessment

The Center for Internet Security (CIS) publishes the CIS Critical Security Controls (CSC) to help organizations better defend against known attacks by distilling key security concepts into actionable controls to achieve greater overall cybersecurity defense.

Establish, implement, operate, monitor, review, maintain, and continually improve an information security management system (ISMS)

Specify a set of best practices.

Ensure the confidentiality, integrity, and availability of all corporate data .

Detail the security controls that can help manage information risks.

ISO (Int. Org. Standardization) 27002 Dashboard

NIST 800-171 Security Dashboard

NIST 800X Assessment

A NIST assessment is a way to evaluate an organization's cybersecurity posture and identify areas for improvement.

NIST is a federal agency that creates standards and guidelines for improving the security and reliability of systems across various industries.

PCI Assessment

A & A Consulting presents the Payment Card Industry Data Security Standard (PCI DSS). The main purpose of this compliance is to safeguard cardholder data both during and following a financial transaction.

PCI DSS stands for Payment Card Industry Data Security Standard, a set of guidelines that help organizations protect cardholder data and prevent fraud. The PCI DSS was developed by the major payment brands, including American Express, Discover, JCB, Mastercard, and Visa, and is administered by the PCI Security Standards Council