American Cyber Security Management

Security In-Depth

• American Cyber Security Management offers services to help businesses ensure their data security and reduce their risk of data loss and exposure. Our assessment and implementation services will enable you to define and adopt a more secure and regulatory compliant posture. We help our customers address security changes at all levels of the organization; C-Level, Informational and Cyber, 3rd party, employee, and compliance allowing you to use your security program as a competitive differentiator in a hostile marketplace. Our sustainability services help you maintain your security program and keep you up to date on emerging vulnerabilities and risks.

ISO/IEC 27001 Training & Certification

• Comprehensive real-world training & certification are offered in a flexible manner that fits into YOUR schedule and is based on ISO/IEC 27001 requirements. Offered as either “Self-Paced” via on-demand web learning, or with a LIVE, experienced, and certified instructor to guide you and answer questions. Live courses are spread out over 8 weeks with 2 evening sessions per week (5:00 pm-7:30 pm MT) of virtual instructor training to give yourself time to ingest, ask questions, and apply the concepts and materials. Both training options are all-inclusive, meaning that they cover everything you need to get the certificate (written materials, examples, best practices, exercises & quizzes). They are packed with practical exercises and case studies that will help you be equipped with real-world expertise that you can immediately apply to your day-to-day operations and activities.

Secure DevOps

• American Cyber Security Management offers services to help technology teams optimize and secure their DevOps processes. Our services help you get your product and services to market faster with higher quality and increased security. From reviewing your processes, systems, and resources to our Framework Implementation services, you will be capable of scaling your software securely and in a more automated fashion. Our DevOps Sustainability services are there for you to rely upon as your business needs change.

InfoSec Risk Management

• InfoSec Risk Assessment & Management offering is based upon a formal, structured, tailorable, and scalable methodology for assessing, building, and evolving an organization’s Security and Risk Management capabilities, all while leveraging a risk framework and ACSM’s highly experienced Risk Management, Privacy, Compliance, and Security team members and best practices. infosec Risk Assessments are performed to fully understand both the threat landscape and security and risk posture of an organization in terms of protection of the organization’s people, data, processes, and technologies (both infrastructure and applications) and also ensure that regulatory privacy and compliance requirements are being met.

Incident Response Planning

• American Cyber Security Management offers an Incident Response Plan (IRP) offering. The IRP offering is designed with best practices and the business culture in mind.

AppSec-as-a-Service

• American Cyber Security Management offers a solution: AppSec-as-a-Service. Our certified and experienced professionals can help you secure your applications.
• Drive Security Awareness
• Application Security Best Practices
• Application Security Risk Mgmt
• Mentoring
• Application Infrastructure Hardening
• Secure Software Development Life Cycle (S-SDLC)
• Internal Software Review (Source code, test data, 3rd party components, configurations)
• Compliance Assessment and Readiness
• Application Security Champion

CISO-as-a-Service

• American Cyber Security Management offers a solution: CISO-As-A-Service. Our certified and experienced professionals can help you right-size your cyber security efforts.
• Manage the Information Security Mgmt System (ISMS)
• Communications (Board, Exec, Staff, Company-wide, Prospects & Customers)
• Policy and Controls Mgmt
• Incident Response Mgmt
• Compliance Mgmt
• Internal Security Audit
• Drive Security Awareness
• Risk Management
• Security Best Practices

DPO-as-a-Service

• American Cyber Security Management’s DPO-As-A-Service can deliver many of the needed privacy services at an affordable cost, without increasing your headcount. Creating the correct EULA’s and Privacy Policies for new and emerging products and services can be complicated. Knowing how your business wants to handle customer data today could be different over time and as your services evolve. Knowing where and how your customers or suppliers will access your services and systems will be important too. Protecting the data of your customers, employees and suppliers is an important part of any business and requires more and more knowledge of global and local laws and regulations.

Security Monitoring

• American Cyber Security Management has a Security Monitoring offering to help companies meet the demands of their business in an ever-changing threat landscape. This Security Monitoring offering is designed to monitor the security events of critical assets and help ensure these assets remain safeguarded to all compliance levels at a fraction of the cost of larger solutions. This offering addresses the key areas of policy, process, and technology. This approach helps the business understand its threats, defend against attacks, and create a visible set of metrics and alerts allowing the business to attend to more important efforts.

Security Operations

• Having a Cyber Security program is as important today as managing your sales, marketing, and finances in any business. Regardless of your compliance (ISO, PCI, HIPAA, etc.), it is important to have secure operating processes. Knowing the key controls that are right for your business and having the right policies, processes, and technologies in place to support them is important to your culture, finances, and customers.

Awareness Training

• As businesses grow it becomes more difficult to ensure the same small company culture that got you started can scale to the size you need to be the next big idea. It is easy for security and those basic best practices of internet usage to be left behind as you hire, onboard more customers, and attack new markets. We offer several standard awareness activities that range from Standard/Basic to Customized in the areas of Privacy and Security.