CASTRA TECHNOLOGIES

CONSULTING PRACTICE

Castra Technologies' global cybersecurity consulting practice delivers operational stability using a flexible frictionless approach that ensures project success.

Based on a strict vendor-agnostic principle, Castra Technologies' global clients have come to trust us as a strategic partner. Our structured approach and use of industry frameworks and guidelines ensure that work is produced and is audit ready.

Castra Technologies consulting offering includes:

• IT Security Strategy
• Penetration Testing
• Pre-Audit Consulting
• Physical Security
• Privacy Solutions
• RFP Creation
• Risk Assessments
• Cloud Security
• Policy & Procedures
• Veiso Services
• Security Assessments
• IoT Security Assessments

Financial • Manufacturing • Hospitality • Healthcare • Infrastructure

GOVERNANCE PRACTICE

IT security governance is the system by which an organization directs and controls IT security (adapted from ISO 38500). Governance specifies the accountability framework and provides oversight to ensure that risks are adequately mitigated. Governance ensures that security strategies are aligned with business objectives and consistent with regulations.

Castra Technology’s Governance solutions will help you meet:

• PCI DSS Governance
• HIPAA Governance
• GLBA Governance
• FISMA Governance
• GDPR Governance
• NYDFS Governance
• ISO 27000 Governance
• NIST Governance

Castra’s team of experts take a business-aligned structured and repeatable approach to your needs.

RISK PRACTICE

Castra Technologies team provides our global client base with a clear understanding of current risk posture, target risk states and a easy to follow road map on how what it takes to get to the risk target state.

What Castra Technologies can do for you:

Castra introduces methods, processes, and structure into an organization risk DNA to addresses risk appetite and remediation.

We provide tactical and strategic solutions in key areas including:

• Penetration Testing
• Risk Programs
• Disaster Recovery
• Incident Response
• Tabletop Exercises
• Run Book Creation

COMPLIANCE PRACTICE

The facts are that it is becoming harder than ever to keep up with the ever-changing regulatory requirement obligations that most companies face today. Most organizations have a hard time ensuring compliance with current requirements, never mind the new needs on the horizon.

Castra's team of compliance experts brings years of experience to every engagement. Dealing with global regulatory requirements, from multinational organizations to government contractors and the hospitality industry, Castra has the skills and expertise to ensure your organization is compliant with each of your needs.

Castra's compliance consultants work closely with you to understand the organization's business, legal, and regulatory needs. We work to establish data classifications and ensure that proper governance is in place to ensure compliance is met.

Each engagement starts with establishing a thorough baseline that provides both client and consultants with "know State."

A thorough gap analysis is performed against industry frameworks that allow Castra's to deliver an actionable business-aligned, prioritized roadmap to remediation.

After the initial work is completed, Castra continues to work with the client to execute the roadmap efficiently and cost-effectively. Castra's remediation services are cost-effective and bring a measurable return on investment.