Schedule a free live demo of the Ostendio MyVCM platform to see how we can support your business in your cybersecurity journey.
Building a solid data security foundation is a key element to a successful and sustainable security program. We recommend building a culture of security in your organization with the support of your organization's senior leadership team. All employees will be introduced to the Ostendio MyVCM platform and their role in your organization’s security program. During the Foundation step, the CISO and security team will learn about the different regulations and certifications that are important for your organization, and identify what level of effort is needed for each certification, whether it is SOC 2, HITRUST or other popular standards. Your company will then select the certification that is right for your business or industry and agree to a schedule and timeline for certification. Employees will be trained on the Ostendio MyVCM platform and start to gather and organize existing documentation and identify key stakeholders. The Ostendio Customer Success team will assist customers every step of the way, offering training to onboard all team members.
Now that the organization's data security foundation is in place, and current documents are in the Ostendio MyVCM platform, it is time to perform a gap analysis on the current security program. Ostendio will work with the organization’s security team, focusing on the security framework chosen by the organization. Ostendio will work with MyVCM Premium and Enterprise customers to perform a thorough review of their existing policy and procedure documents, and importantly build out the processes to support them. Ostendio will ensure that each document has the appropriate approvals and acknowledgements and the ability to track completion of tasks is added into the Ostendio MyVCM platform appropriately.
The best practice regarding the organization’s security process is to ensure all policies and procedures are kept up-to-date with version control and to establish a documentation approval process using the Ostendio MyVCM platform. The document management feature makes it easy to ensure the appropriate employees have access to documents they need to see and that the approvals process is documented clearly. Ostendio Customer Success and Professional Service teams will assist, as needed, in developing the organization’s configuration management in the asset management, audit task and assessment modules. Ostendio will guide the organization through the vendor management process on the Ostendio MyVCM platform as the organization starts the interview process to choose an audit company.
As the organization moves to the Advanced step, their security team will have approved and published policy and procedures to employees for acknowledgement, and the organization will be tracking compliance with the processes that were implemented. Collecting evidence is an essential component to any security program. Security awareness training will be sent out to appropriate staff members and audit tasks will be assigned to collect appropriate evidence. Based on the certification type selected, the organization will have completed the relevant scoping questionnaires. At this stage Ostendio will also introduce risk management, specifically the ability to track and mitigate risk across the enterprise. This will form the foundation for future security investment decisions.
This is the goal of many organizations - to be security certified to their chosen standard. The organization will sign a contract for certification with an auditor group and Ostendio’s team may act as a liaison where necessary between the selected 3rd party auditor and the organization. Ostendio’s Customer Success team will support the 3rd party auditor to ensure they are trained and understand how to navigate the Ostendio MyVCM platform. When the audit is complete and the organization has gained certification the cybersecurity journey has not ended. Most certifications require an annual audit or re-certification and by using the Ostendio MyVCM platform, an organization can keep documentation and evidence up to date which will make any subsequent audits less of a heavy lift in terms of employee time and effort.
