Security Governance and Risk Advisory
Our board services are tailored to your unique specific situation and nEED
While you have a number of options when it comes to the scope and length of services, there are several areas where most organizations benefit from the experience of a Riskigy advisor:
Strategy
Guiding executives across business function and IT, Riskigy’s advisors helps identify business threats, provides a baseline for your current security program and defines security strategy in line with business objectives and technology strategies.
Our phased approach helps ensure an effective and efficient strategy that leverages NIST 800-53 and can be mapped to multiple cyber regulations (e.g., SEC, PCI, HIPAA, GDPR, FINRA, NYDFS).
Assessment
Evaluating culture, processes and technologies from a security governance perspective, Riskigy’s advisoy team develops prioritized actions to help effectively manage your information security strategy and program. Assessments can include:
- Interviews with stakeholders across the technical, business and executive teams as well as gathering documentation
- Robust reviews of a variety of areas, including information asset management, acceptable use policies, data classification, threat and vulnerability management and third-party management
Oversight
Based on the assessment findings, Riskigy can provide various types and levels of ongoing advisory, including:
- Developing policies and procedures to close gaps in documentation
- Developing a remediation plan with actionable, prioritized recommendations
- Implementing the remediation plan
- Providing ongoing strategic guidance that is less intensive, but assists the organization in maintaining long-term goals
Training
Board security awareness is an important part of maintaining a robust program. Your advisory team can recommend and help implement training on topics for every level of user group within your organization. This can range from the highly technical (e.g., secure coding practices) to general data handling education to combating business email compromise. The advisor can also oversee controlled phishing campaigns, conducted by Riskigy, to determine security awareness levels among employees.
IT Infrastructure Security Design
For organizations looking to build from the ground up, Riskigy's advisory team can provide your team with necessary system hardening configuration guides and network designs. This will also include multiple security protections and incident monitoring controls.