WHAT WE DO
Cybersecurity and compliance programs require much more than just implementing an order, standard, or directive. They require a long-term vision to truly recognize the benefits of compliance and improved security, and the experience to advise through the challenges of change management, interpretation, implementation, adoption, performance, and validation. Imagine the benefit of working with a consulting firm that has assisted Critical Infrastructure organizations across the U.S. and Canada with IT and OT cybersecurity and compliance since 2008.
ITEGRITI is that firm. Our team has deep expertise gained through our work in protecting large-scale and distributed National Critical Infrastructure since compliance with the cybersecurity Standards first became mandatory. We are flexible, will easily integrate with your team, bring relevant best practices and lessons learned, and will deliver tangible results.
Cybersecurity
To operate, organizations require the reliability of their information technology systems and IT/OT managed assets. Well-designed cybersecurity programs defend against and withstand most hacks but, despite best efforts, a motivated hacker will eventually break into a system they target.
What happens next depends on incident planning and preparedness. Cybersecurity Resilience builds on good cybersecurity programs by addressing demands for business continuity, information protection, and crisis communications.
-
How will business operations and customer service continue until the technology is restored?
- What did the hackers take, was sensitive data encrypted, and is it usable by these criminals?
- How, when, and what is communicated to leadership, employees, customers, and the community and by whom?
Compliance
Risks associated with cyber systems containing or controlling Critical Infrastructure, BCSI, CEII, CUI, PII and ePHI are growing as regulations mount, hacking tactics evolve, and bad press meets social media. The Federal Government and public demand protection of this information and assets, and these regulations can carry civil, operational and financial penalties. Companies are becoming keenly aware that compliance does not alone provide cybersecurity.
Our team members served in operational, management, and auditor roles and have deep experience in regulatory compliance and affairs, internal compliance program development, cybersecurity, training development and delivery.
Core Capabilities
Our services are organized across three areas: Cybersecurity + Compliance + Managed Services. We also offer “Get Stuff Done (GSD)” support to focus on completing tasks on your to-do list.
- Assessments:
- NERC CIP, TSA SD02, CMMC, NIST, ISO, ISA/IEC, MRA/MRIA
- Asset inventory and site walk-downs
- CIP audit and SME preparation
- CISO/CRO Advisory Services:
- Cyber insurance controls design and effectiveness
- SEC cybersecurity disclosure rule
- Cybersecurity Resilience planning and testing
- Internal Audit program design and support
- M&A Technology Support
- Process efficiency and automation: ML and Al
- Security training and awareness
- Shadow IT reviews and playbook
- Staff augmentation and support
- Supply chain management:
- Policy and supplier assessments
- Tabletop exercise design and facilitation:
- Incident Response, Resilience, Business Continuity
- Training and Education
- vCompliance Team
- Vulnerability Assessments
Managed Services
Effective cybersecurity and compliance programs rely on key functional support from security and compliance managers having specific roles and experience. These professionals are in high-demand and not all organizations are staffed to meet these needs, while others divide and distribute tasks across many resources.
By establishing a key set of necessary tasks and developing a model where organizations can select services to meet their specific need and budget, ITEGRITI can provide ongoing compliance and cybersecurity advisory through our Virtual support models: vCISO, vCompliance Team, and Workforce Support. Our fractional resource models are designed to fit your need and budget.
GSD
Companies struggle with ongoing operational, cybersecurity, and regulatory compliance responsibilities. Recruiting, training, and retaining quality talent is difficult, but it can be even harder to find qualified and dependable consultants to ease the burden from:
- Having more projects or tasks than time or resources to manage
- Ever growing task lists that don’t seem to end
- Preparation activities for upcoming audits and reviews
WHY ITEGRITI?
ITEGRITI designs an approach that follows the Plan, Do, Check, Adjust model. Our leadership team is involved in every project, including initial project advisory, scoping, and organization, and later through direct assignment or oversight roles. Our expertise includes:
- Experience with mandatory Critical Infrastructure IT and OT cybersecurity and compliance since 2008.
- Planning and management of large, complex projects throughout the U.S. & Canada supporting Critical Infrastructure across healthcare, oil & gas, and electric sectors, supporting utilities, transmission, municipalities, cooperatives, and generation representing coal, natural gas, and renewables – wind, solar, hydro and geothermal.
- Team members with deep experience across multiple disciplines:
- IT and OT operational experience with industry, Big 4 and large consulting backgrounds.
- Former regulatory auditors, and former compliance and enforcement regulator senior leadership.
- Advanced degrees, specialties in IT and cybersecurity: MBA, MS, and Doctoral levels.
- Experienced with multiple frameworks and methodologies: NERC CIP, TSA SD02, ISO27k, NIST (RMF, CSF, 800-37, 800-53, 800-171, NISTIR-7628), NRC 5.71, NEI 08-09, AFRMR, and COBIT.
- Certified cybersecurity & compliance professionals: CAP, C|CISO, CCNP-S, CDPSE, C|EH, CISA, CISM, CISSP, CRISC, FITSP-M, GCIP, HIPAA CHP, MCSE, PMP, SABSA SCF, SASE.
- Nationally MBE certified: NMSDC
- Texas HUB Certified
RESULTS DRIVEN …
“Michael and the ITEGRITI team has partnered with us to advance and mature our cyber security capabilities across the technology that operates our critical energy infrastructure, in the midst of an evolving regulatory environment and threat landscape. ITEGRITI seamlessly integrated into our team, providing valuable industry expertise and practical solutions to imbed these new capabilities into the way we work at Duke Energy. Fantastic insights, tangible results. Thank you for the partnership!”
Brian Savoy
SVP, Business Transformation & Technology
Duke Energy Corporation
… EXPANDED SCOPE AND SCALE
ITEGRITI has strategic partnerships with several large, reputable technology and service vendors. By combining our deep IT/OT cybersecurity, compliance, and Critical Infrastructure expertise with this worldwide network of R&D, innovation labs, delivery centers, cybersecurity fusion centers, and 200,000+ consultants we offer expanded remediation, implementation, and integration services.