We make Information Security teams relevant.

We have made our name understanding the strained relationship between executives and the teams responsible for protecting their Information. We work with Executives and Information Security departments to build programs that are appropriate and meaningful to executives and the entire company. We apply proven methodologies that are simple to understand, and yet underutilized by most organizations. We actively listen to our clients, openly discuss the issues, and teach them solutions that address their real needs. Our methods focus on inquiry, communication and effective problem solving. While many think of IT and Information Security consulting services as technology centric, our focus is on changing the way your teams operate in fundamental ways that usually provide them with long-term results.

We teach Information Security Teams how to be effective.

We mentor Information Security teams and their leaders on how to build local, national, and global information security and risk management programs. We guide them through the process of properly understanding their company's risks, how to prioritize their efforts, how to manage their spend and work within the resources they have at their disposal. We apply our years of experience as CSOs, CIOs, and CTOs to provide practical, proven and cost-effective solutions. We bring experience from a myriad of industries and skills that not only include broad technical skills, but also proven personal and organizational management skills to bear.

We guide you through Regulatory Compliance.

We have spent a majority of our careers showing companies that compliance is an opportunity to strengthen the Information Risk Management program and bring peace of mind. We have shown executives how to achieve compliance as a business opportunity. We have taught operational and technical teams how to easily understand and translate regulatory requirements into actual actions they can achieve. We have succesfully led all manner and size of company in achieving compliance with Sarbanes-Oxley, PCI, HIPAA, federal banking and Privacy regulations. We bring a highly experienced and sensible view of compliance with tried-and-trued methods of mitigation that are cost effective and efficient. Our clients successfully achieve compliance and find that the results provide additional value that they hadn’t expected to receive from a “security solution”.