Testing & Evaluation
TWM Associates, Inc., (TWM) has performed hundreds of audits, reviews, and compliance inspections in our 30+ year history.
TWM has performed these activities in support of a variety of Government laws, rules, regulations, guidance, audit programs as well as Commercial rules, regulations, guidance, and audit frameworks.
TWM’s approach to testing and evaluation is based on obtaining an understanding of the environment, identifying the security controls to be tested and evaluated; developing a work plan to conduct the testing and evaluation, identifying the automated tools and interview techniques to be utilized for the effort; conducting the testing and evaluation activities; and then analyzing those results to formulate the recommendations for the organization. Results are formulated from the perspective of cost effectiveness, culture of the organization, and the minimum controls deemed necessary to provide the risk accepted security posture for the organization.
TWM has developed automated tools and pre-formatted interviews for a variety of activities and utilizes them when conducting the testing and evaluation. TWM is able to move from the people and process end of audits and reviews to the extremely technologically oriented end of the audits and reviews. This provides the customer with a solidified effort to work through the varying organizations within an entity, providing a complete team for the audit or review at hand.