TECHNICAL CYBERSECURITY THREAT & RISK ADVISORY

Specializing in OT / ICS Cybersecurity Consulting 

Security program development:

Following industry-standard cybersecurity controls frameworks such as NIST, FedRAMP, CSA, ISA, and CIS, implement a ground-up cybersecurity program or enhance your existing program to reflect your current environment. 

Controls review:

Evaluate existing controls to ensure that they are still protecting your environment, especially post-project implementation (i.e. new technologies, architectural updates, etc).

IT/OT risk assessment:

Evaluate existing operational, technical and management controls within your environment to understand current risk and threat landscape.  Advise on recommendations to fill gaps within the IT systems as applied to OT environments.

GRC compliance & audit review:

Review of current laws and regulations to ensure your organization is within compliance. This review helps ensure you’re ready for security audits by internal and third-party evaluators.

Information security policy development & alignment:

Help your organization carefully develop and implement information security policies to manage risk within business processes to reflect your current environment in line with best practices and compliance with legal or regulatory requirements.

Security architecture review:

Evaluate your security architecture to ensure regulatory and technical controls are built in and allow for scalability of your networks and infrastructure at both an enterprise and solutions level.  

Project SME:

Assist with project deliverables related to security requirements for new or transformative initiatives, including systems migration for acquisitions / divestitures of assets, new network architecture designs, remote access opportunities, perimeter security technology upgrades, cloud security integrations, etc.

Companies I have done senior-level cybersecurity risk analysis for include Enbridge, AltaGas, and Fortis Alberta.