HALOCK is a U.S.-based information security consultancy that is privately owned and operated out of its headquarters in Schaumburg, IL since 1996. From mid-sized to the Fortune 100, HALOCK's clients span many industries including financial services, healthcare, legal, education, energy, SaaS/cloud, enterprise retail, and more. HALOCK is your security partner, providing both strategic and technical security offerings by combining strong thought leadership, diagnostic capabilities, and deep technical expertise with a proven ability to get things done. HALOCK helps clients prioritize and optimize their security investments by applying just the right amount of security to protect critical business assets while satisfying compliance requirements and corporate goals.HALOCK Security Labs and CIS (Center for Internet Security) have co-developed the CIS Risk Assessment Method (RAM) to help organizations find their balance between security and business while evaluating and implementing the CIS Controls. CIS RAM helps organizations define their acceptable level of risk, and determine whether their use of the CIS Controls is risk-appropriate. This method is the first to be based on the Duty of Care Risk Analysis Standard (DoCRA) to help organizations evaluate cyber risk in a way that is clear to legal authorities, regulators, executives, lay people, and security practitioners. DoCRA establishes reasonable security.CIS RAM is an information security risk assessment method that helps organizations design and evaluate their implementation of the CIS Controls. CIS RAM provides instructions, examples, templates, and exercises for conducting risk assessments. And because CIS RAM is based on the DoCRA Standard, its risk assessments meet the requirements of established information security risk assessment standards and demonstrate whether safeguards are "reasonable" and "appropriate" as regulators and judges often require.Do you know "reasonable"​ for your organization?

Risk Assessment Risk Management Compliance Penetration Testing Vulnerability Assessments Malware Defense Security Staffing PCI CISO Advisor Incidence response Security awareness training HIPAA Risk Assessment Threat Management Service PCI DSS Readiness Assessment PCI DSS Remediation Program PCI DSS Validation Security Product Selection Forensics Information Security PCI DSS web application pen test CIS RAM DoCRA Duty of Care Risk Analysis Risk Assessment Method Risk Assessment Methodology remediation verification in-depth penetration test reporting reasonable safeguards reasonable security CCPA Compliance Privacy Third Party Risk Management B2B Networking Hardware Prepackaged Software Computer & Network Security IT Services Information Technology