ABOUT US

HOW DID WE START?

Risk Analysis Consultants, s.r.o. is a Czech based professional provider of information security services and solutions. We have assisted organizations from government and commercial sectors to protect their information since 1995. The company is owned by the founding principal consultant and is independent on any other company or group. We have become one of the first companies exclusively specialized in information security on the Czech market.

WHO ARE WE?

We are a team of consultants with skills in the information security, cyber security, business continuity, auditing, ICT and project management or digital forensics. We are members of several national and international professional bodies. All consultants have to pass a personal assessment test upon joining the company, and key consultants are cleared to different personal security standards. Teams of assistants also supports our accounting, marketing and administrative tasks.

HOW DO WE PERFORM?

The company has been profitable since its foundation and is under constant expansion. We have developed a broad network of contacts in the Czech Republic, working together with top companies and consulting firms in multiple projects. Our activities have crossed the Czech borders and we have key clients and partners abroad (e.g. USA, Canada, United Kingdom, Sweden, Slovakia, France, Slovenia, Poland etc.). This ranks us as the top selling firm in the Czech information security market.

HISTORY

Since 1995, the company has been one of the most significant institutions within the industry.
Some of the major achievements are mentioned below.

25 years since the foundation of Risk Analysis Consultants, s.r.o.

Project of successful implementation of ISMS at a major supplier of services for energy in the Czech Republic.
Creation of BCP and DRP for an international banking group, long-term risk management support for organization in air services, training of specialists in the field of Cyber Crime for the Police of the Czech Republic.

Launch of a specialized portal for Digital Forensics www.forenzniprodukty.cz. Implementation of ISMS on unclassified systems at the Ministry of Foreign Affairs of the Czech Republic in accordance with ISO / IEC 27001: 2013 and the Cyber Security Act No. 181/2014 Coll. Implementing Vulnerability Management and Privileged Identity Management at CSOB Slovakia. BCM for ICT services of NAKIT. Risk assessment of using cloud services with Mainstream Technologies (Microsoft). Implementing a vulnerability and privileged identity management solution at Equa Bank.

Performed a Business Impact Analysis at Vodafone Czech Republic a.s. (EBU – Enterprise Business Unit). Performed Business Impact Analysis, implemented solutions for security incidents and provided forensic evidence from security incidents and implemented procedures and automated tools for vulnerability management at AVG Technologies. The European Commission recognized the expertise and qualifications of the RAC Forensics Institute and approved the establishment of the Czech CyberCrime Center of Excellence (C4E).
Preparation of ČEPS, a.s. and AERO Vodochody AEROSPACE a.s. for certification according to ISO/IEC 27001. Performed Business Impact Analysis (BIA) at Allianz pojišťovna, a.s. and Risk Analysis at Equa Bank a.s. Publishing the first edition of the Digital Forensics Journal. Organization of the very first seminar for law enforcement customers called Digital Forensics InfoDay.

Formed partnerships with Airtight, Cyber-Ark Software and AlgoSec. Establish the principles of BCM in one of the largest financial institutions in the country. Team members of our Digital Forensics Institute successfully passed the exams to receive their international certification AccessData Certified Examiners.

Preparation of companies with a global presence and international network of branches for ISMS certification under ISO / IEC 27001.
The publication of the translation of the book, British Standards Institution “The Route Map to Business Continuity Management. Meeting the Requirements for BS 25999th” as “How to proceed in business continuity management”, which became an important tool for companies implementing BCM (Business Continuity Management). The recertification of RAC and renewal of certificates ISO 27001 and ISO 9001.
The preparation of major foreign industrial companies for the BCM certification according to BS 25999-2:2007. Worldwide Association of IS Professionals ISACA granted certification CRISC to few of our experts and consultants.

Succesfull implementation and certification of the RAC Integrated Management System containing Quality Management System part according to ISO 9001:2000 and the Information Security Management System part according to ISO 27001:2005. The National Security Authority reissues RAC with a valid Facility Security Clearance for the security classification level “Confidential”. Succesfull implementation of the vulnerability management projects within different organizations.

Successfull preparation of our customer to become the first Czech company to acquire ISMS certificate.
Realization of the first extensive projects in EU, obtaining a membership in the international consultation association.
Introducing a system of risk analysis and risk management with the support of remote collection of information.

Development of a specialized analytical software tool for surveying via questionnaire including comprehensive knowledge bases.
Realization of extensive projects introducing ISMS for organizations in the Czech Republic and obtaining a certificate ISO 9001:2000 standard for total quality management system. RAC obtained a certfication from the National Security Authority for security clearance of information on the “Confidential” level.

Own development of an expert system for security audit, advisory services in risk and security management, development of a standard solutions for common information security and management problems. Creation of a Czech version of methodology and tool for risk analysis and management, development of a methodology and security profile for state administration of the Czech Republic.

Complex security projects for state administration, special projects for commercial sector, first translation of risk analysis and management methodology and tools to Czech language. Launch of a number of projects to guarantee safety of large systems in state administration and commercial sector, information system recovery project realization.

Establishment of a local branch of ISACA International Professional Association in Czech Republic. Launch of a number of projects in IS audit and risk management for a government and private sector. Close cooperation with different providers of security solutions and working on projects made-to-order.

Establishment of a company Risk Analysis Consultants, s.r.o.

PARTNERS

We are professionals and we do partner with the best ones.
Our partners are respected foreign consultancy companies and products manufacturers oriented to cybersecurity and digital forensics business.

INTERNATIONAL CERTIFICATIONS

RAC and our team are holders of many certifications related to the information security, information systems and technologies. For example ISO, NSA, MoJ CR, ISACA, ISC2, BSI, BCI, NCIA, PRINCE, CRAMM, QCP, ACFE, MCFE etc.

ORGANIZATIONS MEMBERSHIP

To keep up with the lastest best practices and to maintain the level of knowledge and professionalism, RAC or our experts are also members of different international professional organizations such as ISACA, AFCEA, CSI, ICSA, PMI and many others.