A Name you can trust…
Founded in 1986, Churchill & Harriman (C&H) is a recognized leader in enterprise risk management and third-party risk assessments. A broad range of multinational clients, Fortune 1000 corporations, industry-governing bodies and government agencies rely on C&H’s services for risk assessment, vendor management, business continuity, information security, compliance and more. We have conducted thousands of risk assessments around the world and our work is recognized as “best practice” in the executive suites of private industry and the U.S. Federal Government.
The Security Risk Assessment© from Churchill & Harriman is a critical investment for any organization, SMB, Midmarket, and Enterprise level — commercial or public. The evidence-based value received in enhanced security, compliance, and operational efficiency is unparalleled. I unequivocally endorse Churchill & Harriman to any organization seeking to strengthen their cybersecurity posture, protect their revenue streams, and safeguard their assets.
Jonathan SanchezChief Information Security OfficerTRC Companies
Practitioners such as Ken Peterson individually and Churchill & Harriman institutionally need to be publicly recognized for the many years they have effectively and humbly raised the bar on words like integrity, trust, quality and selflessness. Ken and C&H have done more for industry and positively touched more lives and institutions than most people know. I am a better person for being associated with Ken and I am proud to have him in my circle of influence.
John DiMariaGlobal Product Champion for Information Security and Business Continuity at BSI GroupCSSBB, HISP, MHISP, AMBCI, CERP
It is even more impressive that this has been done during a period of unprecedented change within the information technology organization at [client]. It is a true indication of your company’s professionalism that you have been able to maintain flexibility in light of these change initiatives and at the same time continue to deliver great value to the entire organization. Most of all, I deeply appreciate the substantive results C&H has produced for my colleagues and me. I recognize this is founded on the open and honest lines of communication I have with you and the C&H team. You have earned a meaningful level of trust with me, and I look forward to working with C&H to make a value added difference to [client] in the years to come. I deeply appreciate the substantive results C&H has produced for my colleagues and me. I recognize this is founded on the open and honest lines of communication I have with you and the C&H team. You have earned a meaningful level of trust with me, and I look forward to working with C&H to make a value added difference to [client] in the years to come.
Chief Information Security OfficerFortune 100 Corporation and Health ISAC Board Member Organization
I also want to compliment you personally for the way you have conducted your business dealings with us. This letter is written to make certain you know how high a value we place on our relationship with you. I consider you a trusted business advisor who takes a deep and personal interest in our success, and I always appreciate your honesty and integrity. In every situation you deliver what you say you will, on schedule, and at the budget specified. Most of all, you have a great work ethic, and adhere to the old fashioned values of actually doing what you have committed to do. This type of relationship and this kind of service seem to be increasingly hard to find in this day and age. I am happy to endorse Churchill & Harriman to any organization interested in enjoying a close relationship with a risk mitigation consultancy that I consider an important part of my daily business. I can truly state, without hesitation, that Churchill & Harriman provides the highest degree of honesty, integrity and ethics, and has become a vital component to our success.
Director, Information SecurityFortune 50 Corporation and Health ISAC Board Member Organization
We chose C&H several years ago to contribute to the ever-increasing maturity of our enterprise risk management program. Since that time, C&H has consulted to [client] on a multitude of projects, and executed several internal risk assessments and external risk assessments, always exceeding [client’s] expectations. C&H is the thought leader on the employment of controls, and international standards including ISO 27001. Their risk assessment and vendor management competencies are unparalleled. C&H has earned my endorsement to any firm requiring enterprise risk management expertise.
Chief Information Security OfficerGlobal Financial Services Corporation
Churchill & Harriman have been consulting to us on enterprise-wide business risk mitigation matters for seven years now. We continue to receive the same dedicated service and support from C&H that we received from day one. Few business partners have provided such validated ongoing commitment to customer satisfaction.
DirectorWorldwide Information SecurityFortune 50 Corporation
Trusting Churchill & Harriman (C&H) to be our CMMC Level 2 advisory-through-program implementation partner has proven to be an incredibly wise decision. The comprehensive expertise provided by C&H is truly invaluable. We fully endorse them—enlist C&H as your CMMC partner.
PrincipalMultidisciplinary Engineering and Design Firm
Churchill & Harriman has been a long-time member of the Shared Assessments program, actively contributing to working groups, refining program elements, often speaking at our Summit and on webinars, and executing flawlessly for their customers. Ken Peterson has served on the Shared Assessments Advisory Board and Steering Committee. C&H and Ken have added much to the discussion and strategy on the maturation and future of Third-Party Risk Management at the global level. C&H is known for their integrity and for the efficacy of their work; their earned reputation in the industry is excellent. It is also my pleasure to call Ken a friend!
Catherine A. AllenFounder and ChairShared Assessments Program
For well over a decade, I have had the privilege and pleasure of a continuous dialog and friendship with Ken Peterson, CEO of Churchill & Harriman (C&H), on cyber, third-party risk and Board-level risk issues. As I first witnessed through our service together on the Board at Shared Assessments, Ken is always discreet, thoughtful and constantly looking around corners. He also deftly applies lessons from the past to address future challenges
John CarlsonSenior Vice President, Cybersecurity Regulation and ResilienceAmerican Bankers Association
It is even more impressive that this has been done during a period of unprecedented change within the information technology organization at [client]. It is a true indication of your company’s professionalism that you have been able to maintain flexibility in light of these change initiatives and at the same time continue to deliver great value to the entire organization. Most of all, I deeply appreciate the substantive results C&H has produced for my colleagues and me. I recognize this is founded on the open and honest lines of communication I have with you and the C&H team. You have earned a meaningful level of trust with me, and I look forward to working with C&H to make a value added difference to [client] in the years to come.
Chief Security OfficerFortune 100 Corporation and Health ISAC Board Member Organization

