Computer & Network Security - Foster City, California, United States
You need compliance. But, you want security. While these are often considered disparate goals, they shouldn't be. Too often, compliance practitioners come out of the audit world. They know the control lists, they have the templates and checklists, but they don't understand information technology. Compliance practitioners often frustrate the IT and security teams with excessive requirements they don't understand.Security practitioners, on the other hand, are often focused on a specific area of cyber security (e.g. Identity management, antivirus, firewall management) and lack the end-to-end view of what it takes to build a robust information security program. They tend frustrate the compliance teams by undervaluing documentation, process and training. Regulations such as HIPAA and FISMA provide flexibility. They require organizations make informed and documented risk-based decisions on which controls to implement, how to implement them and where to implement. When the team understands both compliance and cyber security, the resulting information security program will be both compliant and secure without unnecessary overhead.When your goal is compliance and security, let Bayward Consulting be your path to success.Contact Info:Mitch Cohen650-740-5964mitch@bayward.com