GOVERNMENT IT SECURITY

BerryDunn’s information technology security experts provide security assessments, IT risk assessments, and IT policy and procedure development specifically designed for the needs of government agencies.

BerryDunn’s advisors understand your need to protect confidential data and recognize that cyber risk management is a function of overall risk management. Compliance is a necessary part of governance activities but it isn't necessarily sufficient to protect your network and information.

Compliance with state and federal guidelines and regulations is an essential element of both business operations and the governance process. We help you protect your confidential data by identifying your risks and gaps and helping you develop solutions to improve your security posture. We perform a wide variety of compliance services and gap assessments for:

• PCI
• HIPAA
• ACA
• HITECH Act
• FISMA
• NERC CIP-003-3
• IRS-1075
• NIST 800-53 Rev 4
• CMS MARS-E Appendix B
• FISCAM
• CJIS
• OMB Circular A 130
• FFIEC, SANS 20

Incident response begins before a breach.

Whether your organization lacks a computer incident response plan or wants an independent third party review of existing plans, we work with you to put in place the proper policies and procedures for these unexpected, yet anticipated events. BerryDunn IT security experts help you develop documentation that meets multiple compliance requirements.

We believe that security is a process, not a product.

Threats and the impact of a breach affect not only financial processes, but organizational reputation. We work with you to develop a security maturity framework to assess, identify, and remediate your systems, as well as measure improvement over time.