How we can help

We can tailor a solution based on a clearly defined statement of work, or just start with simply having a conversation to flush out the scope of a project. As part of our systematic approach, our current state process assessments can be used as a starting point to benchmark the health and maturity of our clients services. Our offering also includes an array of managed services to enhance your existing program or process. We also have a number of partner organizations we work with to supplement the team and project as required.  Contact us for more information. 
Strategy and Programs
  • Governance and metrics
  • Policy and program implementation
  • Process maturity assessment
  • Risk modeling and scenario development
  • 3rd Party risk assessment
  • Security Performance Management
  • Team building, awareness training
  • Security architecture and controls review
  • Application / Product / OT program enhancement
  • Vulnerability and offensive testing
  • Cloud security, DevSecOps
Frameworks and Standards
  • NIST SP 800 Series 
  • Cloud Security Alliance
  • ISACA COBIT 5 for Risk
  • ISO 31000 Risk Management
  • COSO ERM Internal Control Integrated Framework
  • ISO 27005 Information Security Risk management
  • CIS Benchmark, Lean, Agile
  • HITRUST, SANS TOP 20, OWASP
  • Privacy and Regulatory Standards (GDPR, HIPAA, PIPA, PCI, PIPEDA, SOX, NERC CIP, FedRAMP, SOC 2, CMMC)

Certifications​

  • Certified Chief Information Security Officer (C|CISO), EC Council
  • Certified Information Security Manager (CISM), ISACA
  • Certified Information Systems Auditor (CISA), ISACA
  • Certified Information Systems Security Professional (CISSP), (ISC)2
  • Project Management Professional (PMP), PMI ​