Security Governance, Risk & Compliance
Governance
Strategy, Policy, and Standards Development
Organization Structure
Assess, recommend, and implement solutions (people/process/technology) that enhance governance and oversight across the cybersecurity (IT/OT) program aligned to regulatory frameworks and industry best practices
Organization Structure
Strategy, Policy, and Standards Development
Organization Structure
Create efficient organization structures, roles & responsibilities based on client’s desired results
Strategy, Policy, and Standards Development
Strategy, Policy, and Standards Development
Strategy, Policy, and Standards Development
Align policies, standards, and procedures to current and future state objectives using NIST CSF, FedRAMP, and CMMC cybersecurity frameworks
Risk Management
Regulatory and Compliance Services
Strategy, Policy, and Standards Development
Create and optimize security risk programs that identify, measure, prioritize, report, and mitigate security risks
Develop and implement third-party and supply-chain risk management programs
Create an effective security operating framework that incorporates Three Lines of Defense principles
Training and Awareness
Regulatory and Compliance Services
Regulatory and Compliance Services
Assess current state security capabilities and competencies; recommend and help implement solutions that build security-aware and capable cultures tailored to the organization
Develop and deliver security awareness and training
Regulatory and Compliance Services
Regulatory and Compliance Services
Regulatory and Compliance Services
Provide audit, regulatory, and compliance subject matter support and services related to NERC CIP, AWIA, TSA Pipeline Security Directive, and FISMA standards
Draft regulatory and compliance documentation
Conduct security and compliance controls testing