Governance and risk advisory services

Strategy

Guiding executives across business function  and IT, ComplianceWerx helps identify business threats, provides a  baseline for your current security program and defines security strategy  in line with business objectives and technology strategies.

Our  phased approach helps ensure an effective and efficient strategy that  leverages NIST 800-53 and can be mapped to multiple cyber regulations  (ISO, PCI, SOC2, HIPAA, GDPR, SEC, FINRA, FEDRAMP).

Assessment

Evaluating  culture, processes and technologies from a security governance  perspective, ComplianceWerx develops prioritized actions to help  effectively manage your information security strategy and program.  Assessments can include:

• Interviews with stakeholders across the technical, business and executive teams as well as gathering documentation
• Robust reviews of a variety of areas, including information asset  management, acceptable use policies, data classification, threat and  vulnerability management and third-party management

Oversight

Based on the assessment findings, ComplianceWerx can provide various types and levels of ongoing advisory, including:

• Developing policies and procedures to close gaps in documentation
• Developing a remediation plan with actionable, prioritized recommendations
• Implementing the remediation plan
• Providing ongoing strategic guidance that is less intensive, but assists the organization in maintaining long-term goals

Training

Security  awareness is an important part of maintaining a robust program. Your  advisory team can recommend and help implement training on topics for  every level of user group within your organization. This can range from  the highly technical (e.g., secure coding practices) to general data  handling education to combating business email compromise. The advisor  can also oversee controlled phishing campaigns, conducted by ComplianceWerx , to  determine security awareness levels among employees.

IT Infrastructure Security Design

For  organizations looking to build from the ground up, ComplianceWerx can provide your team with necessary system hardening configuration  guides and network designs. This will also include multiple security  protections and incident monitoring controls.

Reach out to us for more information on our Risk Advisory Program