Precision Risk Solutions, LLC

Virtual Information Security consulting services with a current specialty in the following: • Vendor Management/Assessments: SOC 1, SOC 2, NIST 800-53, NIST 800-171, PCI DSS, ISO 27001-2005, HIPAA, GDPR • 3rd Party Risk Management/Assessments: NIST 800-53, NIST 800-171, PCI DSS, ISO 27001-2005, HIPAA, GDPR • Vulnerability Management: Qualys, Nessus, and others • Penetration Testing: AWS, Microsoft Azure • Security Questionnaires: PCI, NIST 800-53, NIST 800-171, SIG, SIG Lite, PCI-SAQ, HIPAA, GDPR • Vendor Risk Remediation and Management: All Information System/Security remediation • Vendor/Customer/3rd Party On-site Audit Services: Typically includes a physical security inspection, data center tour, policy review, and security questionnaire completion. • Cloud Compliance and Solutions: SaaS, IaaS, PaaS, Azure, AWS, Google • Policy Management Services: Policy creation and maintenance, review, and documentation of gaps and/or risks. • PCI Assessment Services: Preparation, pre-audit assessment, Payment Card Industry Professional (PCI-P) certification • SSAE18 Assessment Services: Preparation and pre-audit assessments • Contract Reviews: Review of contracts and negotiation of terms Other service offerings include but are not limited to the following: Virtual Chief Information Security Officer (vCISO), Virtual Chief Information Officer (vCIO), Virtual Chief Technology Officer (vCTO), Virtual Chief Compliance Officer (vCCO) • Virtual services are offered on a monthly and retainer basis Virtual Security professional with a wide variety of specialties to help your business grow and develop. Seeking to assist startups to medium-sized business create, maintain, and mature their security programs and become compliant to their applicable standard(s). All proposals to complete work are welcomed no matter the size. Open to short and long term projects. Education Master's of Business Administration (University of Miami) Bachelor of Science in Business Administration-Information Systems Management (Amridge University) Certifications CompTIA A+ CompTIA Security+ Certified Ethical Hacker (CEH) Payment Card Industry Professional (PCI-P) Certified Third-Party Risk Professional (CTPRP) Certified Third-Party Risk Assessor (CTPRA) Certified Data Privacy Solutions Engineer (CDPSE)