Cybersecurity and risk management governance, strategy and

Cybersecurity risk management is a complex enterprise wide risk to manage.  A risk that most board members are unfamiliar with but one that if they are a public company in the U.S or a Critical national Infrastructure provider in the EU that will have to become familiar with very quickly.

We work with leadership teams to evaluating current cybersecurity  governance, risk management and cybersecurity capabilities in line with regulatory regimes.  Address gaps in compliance where required and creating appropriate board governance, education and reporting.  To improve board oversight, assurance and attestation of cybersecurity risk management

Cybersecurity risk management is rapidly becoming a regulatory requirement by the U.S and EU.

Regulatory requirements that set out strict compliance requirements.  We work with leadership teams to help them evaluate their regulatory requirements across all the global regulations and harmonise the approach that organisations should adopt to ensure that compliance is the most efficient and effective for themselves and across their supply chains.

Board are increasingly begin asked to attest their organisations compliance to cybersecurity risk management.  We work with leadership teams and senior management to develop cybersecurity risk management programs.  Cybersecurity risk management programs that are aligned to regulatory standards in the U.S and EU including NIST SP 800-30, NIST SP 800-37 and NIST SP 800-39 required by U.S Federal regulations OMB A 130 and FISMA.

We have worked with significant financial institutions to develop global cyber risk management programs.  Programs that align with Basel Accords and RCSA processes.

Cybersecurity strategy and programs are critical requirement for cybersecurity risk management compliance.  We work with organisations to evaluate current cybersecurity programs and close compliance gaps in line with international cybersecurity standards including ISO 27001, NIST SP 800-53, NIST SP 800-171 and NIST Cybersecurity Framework profiles.

We are all founding members of the U.S DoD CMMC program and developed the assessment methodology. An assessment methodology that is used for compliance to DFARS 252.204-7012, -7019, -7020 and NIST SP 800-171.

We work with organisations that are required to comply with DFARS 252.204-7012, -7019 and -7020 to assess their compliance as required using the DoD DAM methodology and make recommendations for remediation and compliance.