Assessment Services

Our assessment services provide a structured approach to your compliance needs and leverage a wide variety of information security regulatory and contractual standards.  Assessment engagements follow a standardized methodology and result in one or more required and/or custom deliverables, depending on the standard being assessed and corresponding reporting requirements. Multi-year pricing is available for assessments that must be repeated annually.

We are a PCI Qualified Security Assessor (QSA) company and can provide PCI audit and attestation services. 

Advisory Services

Instead of a formal assessment, sometimes you may need targeted expertise related to a given standard based on a specific scenario, such as a business process re-architecture or acquisition of another company. 

With our highly-customizable advisory services, our consultants become an on-demand extension of your team to provide expertise for navigating the security standard in question.

Advisory Services can take any of the following forms:

• Scoping Exercises to nail down the specific extent of the standard’s applicability and its impact on your organization.
• Compliance Program Implementation Support to help you understand and develop the standard-specific components needed to successfully achieve and maintain compliance, including potential pursuit of a related certification.
• Staff Augmentation to integrate long-term expertise into your operations.
• General Consulting covering all other aspects of the standard in question.