Ecuron

Ecuron supports Audit, Compliance, and Regulatory programs for Information Security and Technology. We participate in a primary capacity in gap analysis, audits, compliance, and regulatory activities. Areas of specialization include but are not limited to FFIEC, GLBA, NIST, SSAE16, PCI, Sarbanes-Oxley (SOX), ISO 27001, Internal Audit, Threat intelligence and CMMC consulting. We implement processes and procedures based on our deep knowledge of the information security, financial, and/or technology regulatory environment and risk management best practices. We provide oversight and align resources for program activities across a global security organization. We work collaboratively with corporate compliance, internal audit, enterprise risk management and various technical teams to design and implementat audit, regulatory, and compliance practices for Information Security. We promote proactive readiness activities and enhancement of Information Security-based internal controls to support future internal and external reviews. We develop data points to facilitate Information Security risk management reporting activities including metrics and executive reporting. We advise Information Security leadership on the status of technology risk and compliance issues based on assessment results and information from a variety of monitoring and control systems.