Services

Home » Services

Top-Notch Risk Management Consulting Services

Riskcop Advisory LLC provides top-quality risk management consulting for different kinds of business. Whether you are a start-up or a middle-market company, we have you covered. You can always rely on our team to optimize your performance and lessen the risks you may deal with.

  • CMMC Assurance: Cybersecurity Maturity Model Certification / Readiness
  • Risk Management Assurance / Pre-Assessment Reviews / SOC-1 / SOC-2 / NIST 800-171 / NIST 800-53 / SOX / PCI / ISO27001
  • Privacy Reviews: GLBA / HIPAA / FERPA / GDPR / State Privacy
  • Operational & Compliance Reviews / Gap Assessments
  • Risk Advisory Services / 3rd Party Vendor Risk Management
  • Resiliency Services: Business Continuity Consulting / Disaster Recovery Consulting
  • Training and Education / Cyber Security / Industry Best Practices for Data / Data Leakage Protection / COVID-19 Governance
  • Governance Office / Virtual CISO / Virtual CTO / Virtual CIO / Virtual Compliance Officer
  • Incident Response & Investigation
  • Managed Security Software Consulting and Implementation
Risk Management
Fraud Investigator
Data Protection
Cybersecurity Assessment
Vulnerability Management

Learn About Our Services

Our team does risk assessments, System and Organization Controls 1 (SOC 1), System and Organization Controls 2 (SOC 2) assessments, control readiness reviews, and security assessments. These include process walkthroughs, control design evaluation, and operational effectiveness testing. We carry these out under the following security standards:

  • International Organization for Standardization (ISO)
  • National Institute of Standards and Technology (NIST) 800-171
  • Sarbanes-Oxley Act Section 404

We have worked with the following standards in an operational, risks, and security capacity:

  • Committee of Sponsoring Organizations (COSO)
  • Control Objectives for Information and Related Technologies (COBIT)
  • Information Technology Infrastructure Library (ITIL)
  • ISO 27001
  • National Institute of Standards and Technology (NIST)
  • Payment Card Industry Data Security Standard (PCI DSS)

For privacy and vendor risk assessments, we use the Standardized Information Gathering (SIG) approach and work with these standards:

  • Family Educational Rights and Privacy Act of 1974 (FERPA)
  • EU General Data Protection Regulation (GDPR)
  • Gramm-Leach-Bliley Act (GLB Act)
  • Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Industries

Areas in scope include:

  • Application Security
  • Backup and Recovery
  • Business Continuity
  • Change Control
  • Cloud Considerations (Public or Private)
  • Customer Service
  • Data Leakage Protection
  • Database Security
  • Disaster Recovery
  • Encryption
  • Internet Monitoring Controls
  • Logical Security
  • Operational Control
  • Physical Security
  • Risk Assessment
  • Website Considerations
  • And Many More

Potential data in scope:

  • Credit Card Data (PCI)
  • Customer Relationship
    Management (CRM)
  • E-Mail
  • Merger / Acquisition Information (Secret)
  • Personally Identifiable Information (PII)
  • Protected Health Information (PHI)

Get Started

Our professional team will make sure that a seasoned leader will be assigned to each project. We will help you assess what you need so you can make the right decision for your business. Reach out to us today, and we will happily help you in any way we can.