Professional Services Proposal - Criminal Justice Information Security Compliance Gap Assessment

Home Browse Search

Proposal to Provide CJIS Gap Assessment City of South Bend 16 Client Listing • Performed a maturity assessment of a large insurance provider's vulnerability management program and developed a roadmap to improve capabilities. • Assisted a large, multi -state insurance provider in designing and establishing an IT Risk Management Program, aligning the program with existing Enterprise Risk Management initiatives, executing an Enterprise IT Risk Assessment, assessing controls to mitigate risks, and designing strategies to treat risks. • Assisted a large government agency in addressing an executive order due to a data breach, which included performing a data inventory, classifying and stratifying data repositories, defining a cybersecurity framework, assessing controls, and defining a long term security roadmap. • Assisted a State agency in designing and implementing an Enterprise Risk Management Program, developed tools to support execution of the assessment, and trained personnel to manage the program on an ongoing basis. • Assisted an international hospitality company in designing and establishing an IT Risk Management Program, defined IT risk, risk appetite and risk tolerance, developed tools to support the risk management processes, assist with the integration of the process into the existing GRC platform, and helped with the integration of supporting risk management programs into the overall program. • Assisted a large insurance provider in assessing information security across the organization, including through application specific assessments of critical portals leveraged for claims management with members. • Assisted a large, multi -state insurance provider in developing a physical security strategy, including security guards, cameras, and ingress/egress doors to more effectively and efficiently manage physical security risks. • Assisted a large municipal utility by performing a mock audit against NERC's Critical Infrastructure Protection standards. • Assisted an electric and natural gas provider by conducting a mock audit against NERC's Critical Infrastructure Protection standards and performing penetration testing to identify organizational gaps, with follow-up procedures to help design and implement controls. • Assisted an Independent System Operator (ISO) deploying smart grid technology by designing a cybersecurity framework allowing them to oversee providers implementing the technology. • Assisted a large financial institution in developing a Business Continuity Program, including the performance of a business impact analysis, documentation of Business Continuity procedures, and development of test plans. • Assisted a university healthcare provider in evaluating existing disaster recovery procedures of key organizational applications and providing recommendations to address existing gaps. • Assisted an international manufacturing organization protect their intellectual property, particularly within new facilities and third party vendors located overseas, by helping define an information security framework and roadmap to address security gaps within the organization. • Assisted a large insurance provider by evaluating the maturity of the IT Security function, identified the organizations desired future state based on industry benchmark and organizational tolerances, and developed a roadmap to achieve desired organizational capability and maturity levels. • Assisted a large automotive retailer by assessing the maturity of the IT organization, provided recommendations to address identified organizational gaps, and providing ongoing support and guidance on strategic IT initiatives. • Assisted an automotive retailer in responding to an inquiry from the Federal Trade Commission, including a review ensuring they appropriately addressed the FTC Safeguards Rule. • Assisted an automotive retailer by evaluating physical and logical security controls in place to protect customer information and to satisfy regulatory requirements. • Assisted a large transportation organization in assessing security within their critical infrastructure technologies, including an analysis of the security controls and practices within their primary data center and signaling environments.