Security Artifact Development
SCA / AUP Assessment
Churchill & Harriman is extending preferred SCA / AUP Assessment pricing to Aetna vendors. We welcome the opportunity to work with you in completing your SCA / AUP Assessment. For more information on SCA / AUP Assessments and third party risk management, please click here.
Thank you for Churchill & Harriman’s notable contributions to both the SAFE Bio-Pharma Association and its member companies. C&H’s validated business process development expertise, coupled with your institutional identity and authentication management competencies, has all been successfully applied for the good of the entire SAFE community. Churchill & Harriman has exceeded my very high expectations in propelling this challenging initiative forward. Please accept my gratitude on behalf of the SAFE Bio-Pharma Association.
There are several qualities which set Churchill & Harriman apart from other consulting firms that have worked for me over my career. These include great depth of professional expertise and experience; an undying commitment to fulfill the client’s needs; a focused professionalism in ensuring that the client always receives accurate, well-written, timely, and comprehensive work products; a willingness to be candid while also being respectful with the client, to ensure his or her best interests are always served even when uncomfortable truths need to be confronted; and a personal and professional integrity, the likes of which I have rarely seen outside of my many years of service in the military. Churchill & Harriman was always more than a consultancy; they were a true business partner.
Through its membership and contributions to the Shared Assessments Program, Churchill & Harriman has demonstrated its leadership in global vendor management innovation. The Shared Assessments tools contribute to the differentiation of C&H’s program, maximizing risk assessment cost optimization while raising the bar on global information security and privacy protection.
It is even more impressive that this has been done during a period of unprecedented change within the information technology organization at [client]. It is a true indication of your company’s professionalism that you have been able to maintain flexibility in light of these change initiatives and at the same time continue to deliver great value to the entire organization. Most of all, I deeply appreciate the substantive results C&H has produced for my colleagues and me. I recognize this is founded on the open and honest lines of communication I have with you and the C&H team. You have earned a meaningful level of trust with me, and I look forward to working with C&H to make a value added difference to [client] in the years to come.
Churchill & Harriman has been consulting to us on enterprise-wide business risk mitigation matters for seven years now. We continue to receive the same dedicated service and support from C&H that we received from day one. Few business partners have provided such validated ongoing commitment to customer satisfaction.
Churchill & Harriman will play a vital role for our new CYBERFIT utility by delivering industry best third- party risk assessment services for the Health ISAC”, said Denise Anderson, President of Health ISAC. “Our members will directly benefit from this service and we welcome C&H’s expertise and input in helping solidify their security posture.
Practitioners such as Ken Peterson individually and Churchill & Harriman institutionally need to be publicly recognized for the many years they have effectively and humbly raised the bar on words like integrity, trust, quality and selflessness. Ken and C&H have done more for industry and positively touched more lives and institutions than most people know. I am a better person for being associated with Ken and I am proud to have him in my circle of influence.
It is with much gratitude that I extend this letter to you and the C&H team for an outstanding job on the above contract. The professionalism and dedication of your team, coupled with a deep understanding of information security architecture, enabled a most productive collaborative effort, which resulted in successful completion of all deliverables. These deliverables allowed the (client) to accomplish our objectives for this engagement, and to better position the (client) to ensure the security of our information environment.
It is with pleasure that I compliment and endorse the efforts of Churchill & Harriman on behalf of [client] in connection with [client’s] Service Provider Risk Management Program. On-site risk assessments of selected service providers are a critical component of [client’s] program, itself essential for demonstrating [client’s] satisfaction, in part, of the rigorous risk management requirements established by the Federal Financial Institutions Examination Council (FFIEC). Churchill & Harriman stands side by side with [client], sharing our success in these objectives. Churchill & Harriman has consistently over-performed, delivering services beyond the contractually required minimum. Moreover, Churchill & Harriman has developed and implemented a repeatable, global, end-to-end risk assessment methodology that can be replicated and scaled to meet [client’s] needs.
Churchill & Harriman has been a long-time member of the Shared Assessments program, actively contributing to working groups, refining program elements, often speaking at our Summit and on webinars, and executing flawlessly for their customers. Ken Peterson has served on the Shared Assessments Advisory Board and Steering Committee. C&H and Ken have added much to the discussion and strategy on the maturation and future of Third-Party Risk Management at the global level. C&H is known for their integrity and for the efficacy of their work; their earned reputation in the industry is excellent. It is also my pleasure to call Ken a friend!