Our experts support your Cybersecurity Leader with real-world experience derived from hundreds of engagements covering security governance, security operations, and verification of security controls.
GOVERN
Our core consulting service is supporting your existing cybersecurity leader(s) in the overall governance of the cybersecurity program:
- Strategy: We provide strategy guidance, starting with an understanding of the Maturity of your program using our CISO Dashboard. We then establish a Security Plan, provide Budget guidance, and where necessary, recommend Solutions (people, process, technology).
- Policy Framework: We provide a Policy Framework to assess your existing policies, or provide a fresh start, all aligned to NIST CSF v2.0. We accelerate you through the tailoring, drafting, and ratification of policies. Once in place, we then help your teams draft and ratify Guidelines, Standards, and Procedures.
- Compliance Readiness: Our flagship posture assessment is based on NIST CSF v2.0, and can be expanded to include selectable IT controls from CObIT. In addition, we can help you prepare for certifications such as SOC2, PCI-DSS, and HiTrust, as well as helping you align with privacy regulations such as GDPR & CCPA.
- Risk Management: We provide a suite of instruments and templates to help you establish right-sized, agile cyber risk management practices within your overall cybersecurity program. We equip and mentor your team to conduct Risk Triage, Lightweight and Focused Assessments, Risk Treatment, and Risk Monitoring.
In addition to program level guidance and support, we can also coordinate additional support in the area of Operations and Verification of the technical aspects of your cybersecurity estate.
OPERATE
- Hardening: We help you harden your technology estate by applying security baselines from Microsoft and the Center for Internet Security.
- Reinforcement: We help you optimize, modernize, and augment your existing investments in technology hardware and software solutions.
- Upskilling: We provide expert coaching and mentoring to help you upskill your teams, and coordinate exercises to ensure their readiness.
VERIFY
- Breach Readiness: We coordinate with our trusted kinetic security partner to conduct penetration tests, vulnerability assessments, and red teaming exercises, and help you prioritize and remediate findings.
- Active Awareness: We help design, deliver, coordinate, and fine tune an Active Awareness campaign to improve the vigilance of your workforce against Phishing and Ransomware attacks.
- Advanced Protection: We coordinate advanced protections for your executives (CyberShield) and your brand (Prior Breach Analysis). We can also assess and harden any emerging use of AI and LLMs.