360 GRC, Inc. is an IT security & compliance management company that provide tools and services to audit and remediate enterprise network infrastructures for security & compliance to reduce risk exposure. Since our inception, we have been providing the IRP (Information Risk Professional) Groups with a comprehensive suite of solutions to ensure their company's IT Governance, Risk Management, and Compliance (GRC) goals are achieved. Our knowledge and experience in GRC space provides enterprise clients with innovative ideas to protect their network, data center and informational assets.
360 GRC is headquartered in Manhattan, New York; the executive management team consists of six principals each with unique and complementary skills in the following areas:
- Business Continuity Management
- Vulnerability Testing
- Vendor Compliance Management
- Information Security Management
- Internal and External Audit functions
- Penetration Testing
- Governance Framework Management/Adoption
- Telecommunications Management
- Enterprise Architecture
- Governance
- Framework Implementation
- Risk Management
It is worthy to note that the principals have held 'C' level positions and held several key board positions. They have also written books and articles in addition to serving on industry panels. They are often called on for comment by the industry press for their insight in GRC space and IT security and compliance subject matter expertise. This expertise can be validated by our certifications in the industry's most highly-valued certifications in IT Audit, GRC and
IT security and compliance. These certifications include:
- ISO 27001:2005 Lead Auditor
- Cisco Certified Internet Expert - Routing & Switching - Cisco
- Cisco Certified Internet Expert - Security - Cisco
- CCSA (Check Point Certified Security Administrator - Check Point 2000) - Check Point
- CCSE (Check Point Certified Security Engineer - Check Point 2000) - Check Point
- CCNA (Cisco Certified Network Associate) - Cisco
- CCNA (Cisco Certified Design Associate) - Cisco
- CCNP (Cisco Certified Network Professional) - Cisco
- CCNP (Cisco Certified Design Professional) - Cisco
- ITIL (Foundation Examination on IT Service Management) - IT
- CISA (Certified Information Systems Auditor) - ISACA
- CISM (Certified Information Security Manager) - ISACA
- CISSP (Certified Information Systems Security Professional) - ISC2
- CIWSA (Certified Internet Webmaster Security Analyst) - CIW
- MCP+I (Microsoft Certified Professional + Internet) - Microsoft
- MCSE (Microsoft Certified System Engineer - Windows NT 4.0) - Microsoft
- MCSE (Microsoft Certified System Engineer - Windows 2000) - Microsoft
- MCDBA (Microsoft Certified Database Administrator - SQL Server 2000) - Microsoft
- GBLC (GIAC Business Law and Computer Security) - SANS
- CFE (Certified Fraud Examiner) - ACFE
- SSCP (System Security Certified Professional) - ISC²
- ABCP (Associate Business Continuity Planner) - Disaster Recovery Institute
- CQA (Certified Quality Auditor) - American Society for Quality (ISO9000)
- CNA (Certified Novell Administrator - IntraNetware 4.11) - Novell
- CNE (Certified Novell Engineer - IntraNetware 4.11) - Novell
- CRP (Certified Risk Professional) - Bank Administration Institute
- CGEIT (Certified in the Governance of Enterprise IT) - ISACA
- CEH (Certified Ethical Hacker)
In summary, 360 GRC understands the space, has the expertise to accomplish its mission and can prove our experience and expertise within the space with our fortune 100 client base. It is important to note that the principals have been executive management in large, complex companies and therefore understand the wants and needs of our clients whether interfacing with internal/external audit, information security, and GRC.