Risk Services

Risk Assessments, when done correctly, can be an effective way to measure your organization’s cyber posture against required risk frameworks, including NIST, ISO, and HiTrust. There are many general cyber security fundamentals (e.g., asset management tracking, disaster recovery planning, and segregation of duties) that have carried forward over the years. However, as the threat landscape continues to evolve, so should your organization’s approach and processes to support proactive cyber hygiene. Our Custom Solutions team focuses on risk, but we customize our approach to focus on your organization’s strengths, greatest threats, and proven mitigations within and across industries. While measuring risk is methodical, managing risk requires a customized and forward-thinking approach.

At Fortalice, risk assessments do not focus solely on your current gaps and mitigations. We accompany you on your cyber security maturity journey as we strive to increase your cyber security score over time by building a longstanding and constructive relationship with you and your organization. We have proven this with many of our clients as we remediate critical and high-risk findings after our assessment period before moving into a continuous support role to actively help your organization make transformational progress and increase your cyber score posture.

Our team obtains preliminary data to gain a better understanding of your current state so we can focus on the most critical areas during our assessment. In addition to cyber risk assessments, our team provides the following:

• Advisory Services

• Cyber Security Program Development

• Policy Review

• Business Continuity Planning

• Disaster Recovery Planning

• Third Party Risk Assessments

• Governance Program Development

• Maturity Progression

• Incident Response Plan Review, Development, and Tabletop Exercises

• Regulatory Compliance Gap Assessments (e.g., GDPR, CCPA, CMMC)

‍

Our Custom Solutions team works with a multitude of industry-leading frameworks to meet our clients’ needs. Team members and contributors have years of management consulting experience running both large, complex initiatives and smaller scale projects in the private and public sectors, including the financial, health care, insurance, manufacturing, tech, and retail industries. Do you possess strong analytical skills and verbal communication skills? Can you summarize detailed technical risks and data into higher-level threats that a CIO, Board Member, and a business user can understand. Then we want you to join our team!