• Hands-On Experience
  • Ready When You Need Us
vCISO Services

vCISO Services

A vCISO offers a wide range of scalable cybersecurity services, including risk management, program development, training, incident response, and staff augmentation.

Read More

Security News

Security News

Staying up-to-date on security knowledge is pivotal to being proactive in information security. Provided are links and dashboards to keep handy for any security program.

Read More

Templates

Templates

Having trouble getting started on security documentation? Sample documentation for governance, risk, compliance and architecture documents has been provided.

Read More

Cyber Insurance: To Get Paid or Not Be Paid

So you have bought cyber insurance. Let’s take a deep breath knowing that you can be assured that you will not be out millions of dollars should your legal team announce your organization has been breached. Or maybe your organization will hear the words, “we are unable to cover your expenses.” Unfortunately, the latter is…

Security through Cloud or On-Premise?

One of the most common techniques of vendors is to immediately up sell going to the cloud; however, is the cloud always the best choice? To understand the true benefits of the cloud, one must first understand what the cloud is. Often this is alluded to a mega-structure with Fort Knox style security as well…

What is Reasonable Security?

The words “Reasonable Security” often come up in executive meetings to help understand “what do we need to do?”  As a security professional, our goal is to make things as secure based on a risk-based approach but risk can be defined differently based on where one is. In 2019, a big scramble was made by…

SOC 2: Why Should I Care?

Often times an organization is asked “Do you have a SOC 2?” when one wants to find out about an organization’s information security state; however, do we know what benefit that really provides? A SOC 2 Report is a report that helps prospective customers, current and future auditors, investors, and company stakeholders understand the controls…