ENTERPRISE CYBERSECURITY RISK MANAGEMENT
AND RISK ASSESSMENT COMPETENCIES
Board Members and all decision makers want to know the answer to the question, “what have you lived with?”, when selecting a Risk Management or Risk Assessment advisor or partner. Churchill & Harriman (C&H) provides our clients with 28 years of demonstrated enterprise cybersecurity risk management institutional competency; from board level advisory services through global program implementation. We are privileged to serve several of the most discerning clients in the world. Federal government agencies, institutions whose infrastructure is Designated as “Critical,” Systemically Important Financial Market Utilities, Global Systemically Important Banks, industry regulators, governing bodies, global public/private partnerships and consortiums, industry trade associations, global Fortune 100 multi-nationals, and clients of all sizes and maturity levels across industries all depend on C&H to help them identify, assess, and mitigate risk. We have matured accepted global best practice third-party risk assessment frameworks and risk assessment criteria across industries for two decades.
We advise on the employment and assessment of Artificial Intelligence, continuous monitoring solutions, and global risk management and risk assessment frameworks and standards. We architect efficient risk assessment methodologies, through which we produce critical security due diligence artifacts, proof points, evidence, and earned public facing attestations to successfully satisfy specific requirements (i.e., the SEC, FFIEC, NIST Artificial Intelligence Risk Management Framework, the NIST Cybersecurity Framework and NIST 800 Series, all levels of CMMC, ISO Standards, Cyber Risk Institute Profile, the Shared Assessments Program SCA and SIG, StateRAMP, FedRAMP, NIS 2, DORA, and additional requirements). We produce and deliver these and additional critical security due diligence artifacts, evidence, and required audit and assessment outputs with whole efficacy and efficiency—all delivered with the required standard of care.
CHRONOLOGY OF GLOBAL RESULTS AND EARNED DISTINCTIONS — 1997 TO PRESENT
