Information Security, Compliance and Assurance

Cyber security is growing in importance due in large part to the way the Internet has become an essential part of our daily life and the fact that modern computing power lowers the entry barriers while it increases the number of malicious actors.  Because cyber activity has become such an integral part of our operating environment, cyber security must be treated as a fundamental cornerstone of an organization’s mission.  Experience has shown that cyber security cannot be an afterthought or quick fix.  The experts at Ridgewood Partners believe that cyber security must be a core thread in an organization’s DNA.

We assist the U.S. government in protecting against cyber threats through comprehensive, risk-based, cost effective controls and measures. Strategy, policy, operations, technology, people and culture, and management must be leveraged to develop effective solutions to solve this complex challenge.

In January 2008, President George Bush signed National Security Presidential Directive 54/ Homeland Security Presidential Directive 23 — more commonly known as the Comprehensive National Cyber security Initiative (CNCI).  The CNCI recognizes that cyber security must be elevated to a level of importance on par with an organization’s core functions and missions.  It emphasizes that cyber security is a leadership responsibility, not just a function of the Chief Information Officer and information technology staff.  And it acknowledges that effective cyber security is multidimensional, multifaceted, and actively involves the entire organization.

While we agree that technology is an important starting point, Ridgewood views the cyber challenge in a much broader context.  In fact, we believe that the goals of the CNCI can only be met through an integration of technology, operations, culture, management, and policy changes.