WHAT'S INCLUDED
POLICY DEVELOPMENT
Build information security policies based on your GRC platform's categories, leverage partner templates who have resulted in hundreds of successful audits, establish all core policies and review your existing ones.
AUDITOR AND
PENTEST SELECTION
Assist you in selecting and evaluating GRC platform-approved audit and pentester alliance providers.
IMPLEMENTATION AND TECHNICAL SUPPORT
Initial deployment of GRC platform within your infrastructure to begin satysfying contols.
SYSTEM DESCRIPTION
For SOC 2 customers, we will guide the customer through creating this important document, ensuring it meets all standards.
TABLETOP & RESTORATION
We’ll draft security incident response and disaster recovery templates and provide instructions for completion of these mandatory tests.
CONTINUED SERVICES
This is just the start.
Continue using Eden Data to achieve SOC 2, ISO 27001, GDPR, HIPAA or any other framework or allow us to build your cybersecurity program.
Continue using Eden Data to achieve SOC 2, ISO 27001, GDPR, HIPAA or any other framework or allow us to build your cybersecurity program.
WHAT'S NOT INCLUDED
Services NOT included, but available via upgrade
PENTESTING
Assist in selecting a suitable partner and tailoring a penetration tester that aligns with the client’s environment and needs.
GAP ASSESSMENT
Hands-on roadmap building helps identify the differences or “gaps” between your current practices and what’s required by a specific compliance framework.
RISK MANAGEMENT
Internal risk management program in accordance with compliance standards and industry best practices.
DOCUMENTATION
We’ll provide the written records, policies, procedures, and evidence that prove your organization is meeting the requirements of a specific regulatory or security framework.
AUDIT READINESS
We’ll ensure that all required controls, policies, procedures, and evidence are in place, accurate, and up to date before an external auditor steps in.
SECURITY
QUESTIONAIRES
When a customer, vendor, or partner asks to assess your organization's cybersecurity practices, risk posture, and compliance with industry standards, we can do it for you.