Security Frameworks We Work With

The NIST Cybersecurity Framework provides a policy framework of computer security guidance for how private sector organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks.

NIST SP 800-53 provides a catalog of security and privacy controls for federal information systems and organizations. It is the foundation for FedRAMP and FISMA compliance.

ISO 27001 is the international standard for information security management systems (ISMS). It provides a systematic approach to managing sensitive company information and ensuring its security.

SOC 2 is an auditing procedure that ensures service providers securely manage data to protect the interests of the organization and the privacy of its clients. Critical for SaaS and cloud service providers.

The CIS Controls are a prioritized set of actions that collectively form a defense-in-depth set of best practices that mitigate the most common attacks against systems and networks.

Zero Trust is a security model based on the principle of "never trust, always verify." It requires all users, inside or outside the network, to be authenticated, authorized, and continuously validated.

FedRAMP provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by the federal government.