Governance and Compliance

There are a myriad of compliance and regulatory requirements that organizations must adhere to, depending on their industry. Organizations with a strong security profile will usually align with these requirements, but the organization needs to produce evidence that demonstrates compliance. Additionally, cyber-insurance is a rapidly growing market and organizations will need to prove they are not negligent when making a claim. Service offerings include:

Security Program Gap Analysis: Review information security strategy and governance frameworks for organizations based on business initiatives and compliance requirements.

Control Mapping for Compliance: Map technical security controls to compliance initiatives, such as PCI-DSS, NIST, ISO27001, HITRUST (HIPAA), SANS Top 20 and more.

Audit Support: work with the organization to support the internal and external audit processes. Meet with auditors to discuss and analyze findings and recommendations. Analyze and assist in implementing remediation plans.