Cybersecurity, Privacy, & Data Ethics

Our Services

Governance and Risk Management (including CCPA, GDPR, and NYDFS compliance)

• Cyber, Privacy, and IT risk assessments, including but not limited to compliance with:
  • European Union’s General Data Protection Regulation (GDPR)
  • California’s Consumer Privacy Act (CCPA)
  • New York State Department of Financial Services (NYDFS) Part 500
  • Brazil’s Lei Geral de Proteção de Dados (LGPD)
  • Securities and Exchange Commission (SEC) information security requirements
  • Gramm Leach Bliley Act (GLBA) Safeguards and Privacy Rule
  • Health Insurance Portability and Accountability Act (HIPAA) Safeguards and Privacy Rule
  • As well as leading industry frameworks from the National Institute of Standards and Technology (NIST) Cybersecurity Framework, International Standards Organization (ISO), and Information Systems Audit and Control Association (ISACA’s COBIT 5)
• Policies and procedures update/development, implementation, and testing
• Penetration testing and vulnerability scanning
• Data Mapping and Personal Data Inventories
• Board reporting
• Strategic planning
• Data driven operational support for marketing, human resources, business operations, information security, and internal finance efforts

Our Services

Vendor and Third-Party Risk Management Program Development

• Privacy and cybersecurity vendor assessments
• Framework development
• Policies and procedures
• Vendor risk ratings criteria
• Contract review and execution
• Due diligence reviews, baselining for mergers and acquisitions
• Ongoing monitoring

Our Services

Training Program Development

• Table-top exercises
• End-user awareness classes, videos, and workshops
• Executive leadership cyber business risk, threat, and impact awareness
• Email phishing exercises and incident response testing
• Policies and procedures and role-based training
• Stakeholder incident response training

Our Services

Cyber Insurance Data Breach Remediation Support (Incident Response and Recovery)

• Forensic Technology:
  • Attempt to identify entry-point of breach, and size and scope of data that has been compromised.
  • Pursue data recovery efforts to attempt to retrieve data controller’s data.

• Cybersecurity:
  • Provide incident response, business continuity, and disaster recovery preparation and support.
  • Provide third-party CISO support to manage the patching of remaining cyber vulnerabilities.
  • Provide ongoing threat intelligent support

• Data Privacy:
  • Ensure applicable breach notification obligations are satisfied under 50 U.S. State laws, CCPA, GDPR, LGPD, NYDFS, HIPAA, COPPA, etc.
  • Leverage technology to identify specific individuals who must be notified of a breach.