Security - It All Starts with Strategy Information security and compliance issues are getting more complicated and more critical every day. Every organization has to confront questions like: • How worried should I be? What should I really be worried about? • What can I do about it? What should I do first, and what can dome later? • What solutions will really help, and which are just smoke and mirrors? • Am I getting value for money? Where am I over-spending? These questions can’t be answered just by throwing technology at them, and before you can think about that sort of tactical execution, you need to find the right strategy: the right direction and the right priorities. The Cranny Group can help you with that strategic direction and provide real business value and real risk-reduction. Whether its strategic advice you need, or on-the-ground security leadership from experienced experts, we provide the services you need, with an engagement model that fits your business. Our Services Strategic Advisory Services — expert advice and direction on: • Cybersecurity Program design, review, and optimization • Executive support and engagement Virtual CISO / Interim CISO — fractional and/or temporary staffing by experts able to deliver all the services below. Available at a range of engagement levels. Risk Management — • Identification and Measuring of Key Cybersecurity Risks • Risk Management Program design and execution Risk Solutions — • Identification and prioritization of specific, actionable solutions • Policies and Procedures • Training and awareness Compliance and Audit Management 3rd Party Security Management — • Vendor/partner security reviews and Due Diligence • Contractual reviews and obligation management (upstream and downstream) • Due Diligence – mergers, acquisitions, and spin-offs Start-up and Technology advisory services