Frameworks & Standards

Frameworks and standards are help enterprises to understand, measure, and determine their security posture in a repeatable standard way, and too easily convey this to others.

  • Creation, review, and mapping of standards
  • Customized development of NIST Cybersecurity Framework (CSF), and NIST Risk Management Framework (RFM)
  • Updating policies throughout an organization to include security, privacy, cloud, etc.
  • Cloud Computing Architectural Framework
  • NIST, COBIT, OpenSAMM, BSIMM, OWASP, SANS, CVSS, CWE, CAPEC, CERT, and FFIEC Handbook, SoX 404
  • Cybersecurity Framework
  • CMMI, Six Sigma