Tailoring information security to business requirements
itrust consulting is a Luxembourg company specialised in Information System Security. Created in 2007 by Carlo Harpes, PhD itrust consulting consults its customers to protect their information against divulgation, manipulations and unavailability. itrust thinks that the security should be ensured at every level of the infrastructures. It is the reason why the company's research domains are not only limited to network security but either on securing localisation data (GPS/GALILEO/EGNOS), protecting Critical Infrastructures or even preserving user's privacy.
PhD Carlo Harpes is an expert in Information Systems Security involved in education, R&D and standardisation (University of Luxembourg, ISO, CLUSSIL, CNPD, ILNAS, FP7, Celtic, ESA etc...). He succeeded in building up a highly qualified team in which in general team member have a Master degree.

itrust consulting offers:
Audit services:
  • Organisational audits: ISO 2700x, ISO 20000, ISO 27799, IEC 62443, internal referentials etc...
  • Technical audits: Code reviews (e.g.: OWASP), vulnerability and penetration tests, protection of critical infrastructures, Wi-Fi security, protection des personal data, PCI-DSS, Common Criteria, CSSF compliance, SCADA, privacy etc...
Consulting services:
  • Assistance to security implementation (ISO 27001, ISMS, PolSec etc...)
  • Project management
  • Design of secure infrastructures
  • Technical studies (PKI, VoIP, virtualisation etc...)
  • Technology migration (Microsoft, PKI etc...)
  • Risk analysis based on itrust tool: TRICK Light
  • Assistance in the development of secured applications
  • Forensics analysis
Elaboration of security tools
  • TRICK Tester (Penetration testing platform)
  • Security CMS
  • Secured communication gateway
  • TRICK Light (risk assessment tool)
itrust Training Centre (Foetz, Luxembourg):
  • Examples of 2011 trainings: Common Criteria, PCI-DSS, ISO 2700x, Certified Information Risk Manager, ISO 27005 Risk Management etc...
Sourcing:
  • CISO assistance, outsourcing, multisourcing

Fields of expertise: Critical Infrastructures (finance, energy, health, industry etc...), e-banking, web applications, PKI, systems and networks,  IT governance,  personal data protection etc...
itrust consulting innovates in European R&D projects and develops norms, methods, trainings and tools covering ISMS, risk analysis and treatment, digital signature, Critical Infrastructure Protection, SCADA, localisation security and other fields of expertise.

Carlo Harpes
Managing Director