Home2022-04-07T23:21:22-04:00

The Current State

0%
Implicit Mandate
85%
Implicit Mandate

85% of consumers will not do business with a company if they have concerns about its security practices.

0%
Cognitive Bias
74%
Cognitive Bias

74% of US organizations consider complying with a regulatory mandate, such as SOX or PCI, as “very” effective or “extremely” effective at improving cybersecurity.

0%
Trust Deficit
9%
Trust Deficit

Only 9% of executives are able to accurately measure their value of trust. Yet, 85% of businesses cite trust as a necessary precondition for collaboration and innovation.

Our Mission

To quickly understand, prioritize and manage your cyber risks. Accelerating your organization to inspire confidence, innovate and drive growth.

Virtual CISO

On-demand access to a top-tier security leader with specialized technical knowledge and corporate governance experience. Get better guidance, quality and speed on every decision and deliverable.

vCISO Silver
The Strategic Plan

$1,999/mo.

Benefits
Includes strategic and tactical support with current and planned cyber risk initiatives. Quarterly call to review investments, progress, and issues.

Plan Details
8 Support Hours/mo.*
Quarterly Check-in Call
Product Discounts
30 Days Risk-Free Money-Back Guarantee




vCISO Gold
The Performance Plan

$4,999/mo.

Benefits
Everything in Silver plus complimentary enterprise risk assessment and strategic roadmap to recalibrate risks and the go-forward vision.

Plan Details
24 Support Hours/mo.*
Quarterly Check-in Call
Product Discounts
Annual Risk Assessment
Annual Strategic Roadmap
30 Days Risk-Free Money-Back Guarantee


vCISO Platinum
The Value Plan

$9,999/mo.

Benefits
Everything in Gold plus premium whitepapers, how-to checklists, invitation to network with peers and our exclusive best practice video series.

Plan Details
50 Support Hours/mo.*
Quarterly Check-in Call
Product Discounts
Annual Risk Assessment
Annual Strategic Roadmap
Premium Whitepapers
How-to Checklists and Guides
Knowledge Sharing Call with Peers
30 Days Risk-Free Money-Back Guarantee

Contact Us to Schedule a Complimentary 25 Minute Call

* Unused hours roll-over for a 12-month period.  Total Support Hours per Year: Silver – 96hrs, Gold – 288hrs, Platinum – 600hrs.

Technical Services

Framework Implementation

With a myriad of compliance frameworks spanning across seas to affect business in other countries, companies not only face intensifying pressures to navigate each regulatory environment but to do so in an increasingly complex threat background. Eliminate the guesswork!

ControlPoints can help you formulate and implement a streamlined compliance program pivotal to the business seamlessly fulfilling its customer demands while meeting its regulatory obligations and avoiding damaging attacks resulting in data breach, fines and reputational damage.

We take the time to understand your industry and organization to design a nimble, top-down, risk-based compliance program. Leveraging 20 years of IT security framework expertise combined with the latest audit techniques and tools employed by the Big Four international accounting firms, we developed our proprietary ControlPoints Express Matrix (CPEM) that quickly cuts through the complexity with a tailored set of agile controls that precisely satisfy any audit. CPEM drives value with integrated cyber resiliency controls honed with cutting-edge design strategies that make security a streamlined component of daily operations.

Whether its separation of duties controls in ERP, super user lockdown or vulnerability management, we help fortify IT with sustainable, recordable and repeatable processes while at the same time achieve congruence with relevant Acts, Laws and Regulations – quickly. We specialize in express implementation of the following:

Private

  • SOX 404

  • GDPR

  • PCI

  • ISO 27001

  • FFIEC

  • PII

  • SOC II

Government

  • FISMA

  • A-123

  • NIST RMF

  • FedRAMP

  • CMMC

  • IV&V

  • POA&M

Control Readiness

Successful organizations know that risk can come from every angle — upside, downside and outside — and can be hard to see, anticipate and respond to. With our help, they are embracing these risks, updating their risk functions and sharing risk intelligence to generate fresh value through aggressive innovation that gives them a competitive advantage.

We help organizations raise their trust coefficient by locating and remediating gap and process breakdowns from an independent, unbiased view. Our team employs a systematic, disciplined approach to identify key points of exposure, give practical recommendations grounded in real security value, and implement controls correctly the first time, every time. We can help you develop long-range and annual risk strategies and improve the performance of your supply chain.

In today’s world, every organization is digital by default. And, as many organizations have learned, it’s no longer a matter of if you’ll face a cyberattack, it’s a matter of when.

Orchestrators employ sophisticated methods of automation, misdirection and ambiguity against a backdrop of underinvestment, improvised strategy, complex and numerous security products, and lack of cyber talent. Every asset in your organization is at risk. Exposing the attacker requires defenses that identify each threat, even when it adopts the colors of its target environment.

We can help you protect your business by building a resilient cybersecurity foundation, detecting the cyber threats you are facing and responding to a breach incident. We recognize that cyber security is about risk management – not risk elimination. We assist business leaders deploy an optimal combination of strategy, technology and training to work in equilibrium to scale resiliency throughout the enterprise.

From security architecture-to-culture change and SOC tools-to-cloud management. No matter where you are on the cyber security journey, we can help you reach the destination: a place of confidence that you can operate without crippling disruptions from a cyber security event.

Our comprehensive strategy-to-execution approach looks at the whole of your network and takes into account how your users access and use data. We design an architecture that minimizes risks and maximizes technology investments. Together, we can help you deliver better outcomes and long-lasting results.

In the wake of the economic crises and scandals of the past few years, the market is demanding more accountability and transparency from companies in all aspects of their business. Organizations that value trust as a differentiator perform periodic audits to give assurance on their performance and viability. Audits are the fundamental building block of effective capital markets and high-quality audits enhance trust, confidence and facilitate economic growth.

ControlPoints’ auditors perform the valuable role of being a trusted intermediary between the providers of business information and the users of that information – investors, business partners and end-customers.

Our audit work provides quality, integrity, technical excellence, exceptional service and a broad understanding of financial, IT and operational factors. Our independent and objective view into your organization’s operations and that of your 3rd party vendors provide fresh perspective to pinpoint blind spots and reveal untapped opportunities.

We seek to challenge assumptions and unlock valuable insights based on a thorough understanding of your organization’s business and industry, powered by analytics-driven audit methodologies and approaches that instill confidence in the important decisions that management makes on behalf of the organization.

Strategy

In today’s complex environment — with a preponderance of data, volatile geopolitical events and a fluctuating global economy – setting and executing a strategy to optimize the value of an organization has never been more challenging.

In such a fast-paced world, C-suite and business leaders must truly be effective at driving value creation across their organization.

CxOs need to consider and take bold and transformative steps such as redefining their organization’s purpose, embarking on end-to-end digital transformations, pursuing and optimizing inorganic growth strategies, defining and implementing organic growth strategies, learning how to achieve disruptive innovations, understanding and acting upon changing customer and market dynamics, optimizing their supply chain and taking into consideration risk interconnectedness and the velocity with which risks can impact business operations.

The enhanced business insights our team brings help organizations see their business from a new perspective.

Technology Consulting

This is your disrupted world, and ours. Accelerating advances in technology and changes in business models are transforming the rules and risks of the game. A new energy and approach is needed, the old ways of doing business just won’t cut it anymore.

Technology can help you build better relationships with your customers, cut costs, drive growth and generate value, but it also has the potential to do the exact opposite. You need to invest in the right things at the right time; you must consider the wider implications of digital disruption, from AI to the Blockchain; you may well have to integrate breakthrough innovations with legacy infrastructure. Turn your technology vision into reality. We can support you at every step of your digital transformation journey, from strategy through execution and from vision to value. How we help you do that:

  • Architecture & Integration
  • Enterprise & Cloud Applications
  • Program Delivery Services
  • Quality Assurance

ControlPoints’ Technology Consultants can help you identify and solve the challenges that stand in the way of your growth and progress. We will work with you as colleagues, shoulder-to-shoulder, until we have delivered the results that matter to you.

What do you need to get done?

What Our Customers Say

ControlPoints’ pragmatic services bolstered our resiliency and risk management capabilities.

CIO, US Inter-American Foundation

ControlPoints demonstrated superlative contractor support to my IT Security team and the entire agency. I give them my highest recommendation.

CISO, US Small Business Administration

ControlPoints created our COBIT controls, performed a detailed audit with recommendations that fit precisely the business objectives and culture of our organization, and facilitated the interactions with our outside auditors. They did an outstanding job!

VP Information Systems, GeoVera Holdings Inc

ControlPoints’ work was visionary!

VP of Finance, Rosetta Stone

ControlPoints delivers quality results with a quick turnaround. They think outside the box to come up with creative solutions. They are an asset to any team.

Director Internal Audit, Fannie Mae

Perspectives

Build Trust with Your Customers to Transform Your Business

Lockdown Your Crown Jewels Resiliency, Today

Certifications

HUBZone ControlPoints

ControlPoints proudly operates and employs talented people from a Historically Underutilized Business Zone (HUBZone)

Houston MBE

Team ControlPoints enables the Mission of the City of Houston with unique capabilities in Cyber Defense

NYC MBE

ControlPoints enables the Mission of the City of New York with high quality Cyber Project Management