Ostendio, a provider of cybersecurity and information management software, today has formed a strategic partnership with ComplianceForge.
The company has partnered with ComplianceForge, a solutions provider of cybersecurity and privacy compliance documentation, to offer an easier way to maintain compliance with changing cybersecurity regulations and requirements.
Ostendio has already signed up to utilise the open-source Secure Controls Framework, a set of cybersecurity and privacy controls that spans over 100 statutory, regulatory and contractual frameworks.
“We’re excited to partner with ComplianceForge and combine their industry-leading information security documentation with our cybersecurity management software to simplify the process of complying with ever-changing industry standards,” said Grant Elliott, CEO and president, Ostendio. “By utilising ComplianceForge’s documentation expertise and leveraging the SCF, we have built in to MyVCM an automated cross-walk which allows companies to more easily comply with multiple privacy and security regulations.”
Based in Tualatin, Oregon, ComplianceForge specialises within the cybersecurity profession, where its focus is on Governance, Risk and Compliance (GRC). It documentation helps companies become and stay compliant with cybersecurity and privacy requirements, including Digital Security Program (DSP), ISO 27002 Based Security Documentation (WISP), Security & Privacy By Design (SPBD), NIST 800-171 Compliance Criteria (NCC), PCI DSS v3.2 Information Security Policy & Standards, Incident Response and Third-Party Compliance, among others.
Tom Cornelius, senior partner at ComplianceForge and founder of the Secure Controls Framework added, “The mission of the SCF is to provide a powerful catalyst that will advance how cybersecurity and privacy controls are utilised at the strategic, operational and tactical layers of an organisation.
“By building this and ComplianceForge’s industry leading documentation into Ostendio’s MyVCM platform, companies will find it easier to implement a variety of controls across multiple standards and regulations, including NIST, SOC, GDPR and FedRAMP.”
Copyright © 2018 RegTech Analyst
Copyright © 2018 RegTech Analyst
