ISAP consists of a Threat Analysis, Vulnerability and Risk Assessment, and Countermeasure Development and Recommendations. Developed by David Brussin, 3LA is a comprehensive, repeatable methodology for achieving verified security. Unlike many security consulting companies, Spectria InfoSec approaches the challenge of designing secure, reliable information systems by using a formal methodology for information systems security analysis. Goes beyond audit - it is not adversarial, it is a cooperative assessment and improvementof systems.
Process reveals both strengths and weaknesses.
Delivers protection improvement plans built on business need, not theory. Methodology avoids finger-pointing and builds trust between Spectria InfoSec Services and client staff. Security is already improved at the end of the assessment. ISAP's strengths include The ISAP team working closely with company people. The ISAP team learning understanding your corporate culture.