Security Consulting

Security Consulting provides implementable security consulting services. Referring to Ping An’s security experiences and best practices, we customize information security management systems according to your requirements. We provide professional data consulting services for the most important asset in the cloud—user data, to protect data security and user privacy in the cloud. We also offer one-stop certification consulting services to help users quickly pass various security and compliance certification procedures.

Service Advantages

Implementable

Referring to Ping An's own system construction and safety management experience, we provide feasible safety consulting services that the fit clients' businesses.

One-stop Services

One-stop coverage and standard IT risk and compliance consulting services help you build the strongest security system.

Professional

The consulting team consists of managers and upper level staff from top consulting institutions in the industry. Our core experts have more than 10 years of experience in the security consulting industry.

Success Stories

Ping An Property & Casualty Insurance

Ping An Trust

Ping An Bank

Ping An Annuity

Ping An Fang

Ping An Securities

Service Contents

Safety System Consulting
IT Operation and Maintenance Consulting
Risk Consulting
IT Compliance Consulting

Assist in establishing an information security management system and data protection system, etc.
Assess risks and make overall safety plans
Meet various safety standards and obtain certifications, such as ISO27001, ISO20000, ISO22301, ISO27018, Trusted Cloud, classified protection, HIPAA, PCI DSS, etc.

Refer to ITTL and other operation and maintenance standards to help customers standardize IT operations and maintenance processes (such as service desk, event, configuration and alterations, etc.)
Standard IT asset management and establish logical relationships among the huge and complex IT assets
Improve IT operations and maintenance efficiency and capability

Using references to regulations and guidelines relating to technological risk management to set up a comprehensive technological risk management system
Establish a risk management system that covers IT governance, information security, development, operation and maintenance, outsourcing, business continuity, IT audit and other aspects, and identify key risk indicators (KRI)
Build a risk management system and a project supervision system

Assist in interpreting and analyzing IT compliance requirements at all levels (such as the CBRC, CIRC, CSRC, PBOC, etc.)
Guidance in implementing relevant requirements and regularly inspect the compliance requirements of implementation