Blog

Deconstructing GRC: Todd Graham, RSA Office of the CTO

Read Blog

We specialize in compliance and industry standards such as HIPAA, HITRUST, HITECH, BASEL II, GLBA, NERC, PCI DSS, and ISO27000.

These services together translate business objectives into policies and information risk strategies, delivered through technology, policy and program development, to help meet regulatory compliance and governance requirements.

Our Security Consulting Services include:

• Information Security Policy Development: The Information Security Policy Development service helps you with defining and mapping policies to best practices, individual business requirements, and appropriate regulations. The result is the creation and implementation of effective data security policies, which helps to establish a consistent and repeatable way to manage information security risk.
• Information Security Program Development: The RSA Security Program Development service can help you organize your multiple security risk remediation initiatives into a project-level roadmap that helps meet requirements for regulatory compliance.
• Information Risk Assessment: The Information Risk Assessment service is a broad-based security posture assessment for information security that is designed to provide a systematic overview of an organization's information security capabilities and prioritized recommendations for risk remediation.
• Policy Driven Management: Establishes the overall roadmap for deploying RSA's Archer Suite , offering a holistic view of your processes and how to best leverage Archer to facilitate those processes, a solution architecture that depicts proposed Archer solutions, applications and data integration plans, and an implementation approach outlining the sequence of activities and dependencies.

RSA offers complimentary technologies, along with design and implementation services from RSA Professional Services which help customers achieve the greates value in enforcement of standards and compliance requirements from RSA's award winning technologies such as Archer and DLP. In applying Archer as a dashboard for policy control, and integrating DLP to ensure that data is protected based upon policy and classification, RSA Professional Services can assist with services across the spectrum - strategy, design, transition, operations, and continuous improvement - helping customers realize their objectives.