Zepko Management Information (Z-MI) is Zepkos methodology-based approach to provide a unified Security Management Framework within an organisation that will ultimately lead to a more cohesive and focused use of corporate governance and IT security controls.

Solution Assurance is built into all Zepko’s solutions; one phase naturally leading into the next.

• The Feasibility Study determines the best-fit product set once more intelligence is gained on the client. The Feasibility Study determines client readiness and establishes whether existing management frameworks are being used and need to be integrated with as well as providing analysis of the digital landscape.
  
  
• The Z-MI Methodology provides the glue between the policymakers and the operations team such that management can effectively reconcile internal/external regulations and compliance policy to operational outputs and deliver an improved Risk Management capability that can be used throughout the organisation and provide a better quality of management information for company use.
  
  
• The Z-SIEM Methodology provides the quality of implementation of product plus process transformation. This includes the utilisation of SIM-Helper technologies where appropriate and encompasses the entire project lifecycle including the definition of major and minor milestone activities and deliverables.
  
  
• The Z-SIEM Flex-Options provides the final phase of any project, the transition from project to business as usual operations; this element includes providing assistance and direction to the organisation and includes provision of either 'early life support' or ongoing support for the deployed infrastructure and process frameworks.
  
  

The Z-MI model addresses:

Common Challenges
Explaining expenditure
Improving operational effectiveness and efficiency
Meeting Legal & Regulatory requirements
Not introducing too much complexity
Operating to an acceptable level of risk

Business Drivers
Common Language internally and with customers
International Standard
Financial Services Authority (FSA)
Sarbanes Oxley (SOX)
SAS 70
ITIL /15000 Service and Support Management
Gain competitive advantage
Support Company brand values

The objectives of a Security Management Framework
Standards adherence to policy and standards
Services Industry (Different audiences/different standards)
How good is good
External versus Internal threats
Business responsible for implementation
What went wrong? How are we doing?
Appropriate protection
Cost effective/prudent controls
Reconciled toolsets

Business Objectives
Security must become a business as usual activity.
Improved processes and technology usage/deployment
Rationalise Collate and reconcile to framework
Enhance Build security into business processes
Simplification Checklists not questionnaires, abstract away detail.
Monitored and measurable (Management Information reports/dashboards)
Correlation and Analysis
All projects to comply with security policy which supports security strategy
Making it easier to help business to help themselves
Allowing security to focus limited resources

Z-MI Strategic Principles
Phased to allow businesses to digest and prepare before accountability
Toolkits and training to be developed in consultation with businesses
Focus on engagement and acceptance rather than imposition and compulsion
Focus on careful project management to ensure understanding, competence and acceptance in business