• Authentication Systems Audit - focuses on auth mechanism and products which support SSO and internal authentication for Permanents to internal applications. Also, it will involve Active Directory security. This project would require individuals who are technology-heavy in those.
• There is some regulatory validation work which is heavy around ""Incident Response"" topics such as Security Operations Center/Network Infrastructure Defense. These areas related to the strengthening of incident response framework and hardening of assets to avoid Command/Control attacks from intruders.
• There are also some MRAs focused on Identity/Access Management/Governance (FIDs/Entitlements), which will require very structured validation work based on IA QA guidelines. This will need experience with tech audit/control analysis with an understanding of IAM/FID/Entitlements/User access topics.