John Verry

Most of our clients need to prove they are secure and compliant to key stakeholders like their clients, regulators or their board. Simply put, Pivot Point Security helps them do that. Knowing you are secure and compliant, and being able to prove it, allows you to focus on core competencies like growing your businesses. Pivot Point Security offers a group of interrelated services that help you become “provably” secure and compliant: • We help clients get certified to trusted information security frameworks like ISO 27001, NCSF, SOC 2, ISO 22301 and HITRUST; and achieve compliance with important laws and regulations like CMMC, PCI, HIPAA, DFS 500, NIST 800-171 and GDPR with our GRC consulting and auditing. • We help client’s close resource and expertise gaps in their security organizations by acting as an extension of their teams through our vCISO/Virtual Security Team services. • We help clients validate key networks, applications and systems are secure by performing vulnerability assessments, penetration tests and gap assessments. • We ensure clients manage vendor risk by helping them build and operate Third Party Risk Management programs. • We turn employees from our clients’ greatest security threat to their greatest threat detection mechanism through our security awareness education and social engineering assessments.