Ray C.

Vciso Security Advisory Services Program Lead @Insight

I contribute as a program manager of Insight’s Security Advisory Service where general security assessments and information security program advisory is provided based upon common control frameworks (i.e. NIST SP 800-53, 800-171, ISO 27001/2, HITRUST, HIPAA, CIS, CMMC, etc.) and industry best practices. I also have primary responsibility for the development of promotional, training and engagement-oriented collateral to support Insight’s vCISO, Third Party Risk Management, and Incident Response service offerings. The Virtual CISO offering addresses numerous client priorities for their cybersecurity programs including: policy review/development, control selection/implementation, technical standards, cybersecurity operational processes (e.g, SOC operations, red/blue team exercises, vulnerability and patch mgmt, identity and access management, change management, resiliency oversight, cybersecurity risk management inclusive of a third-party risk assessment process, and other program development concerns (compliance, governance, access modeling and management, budgetary process and strategy, development/documentation of EISAs and associated roadmaps, etc.).