» cyber & information security

risk

current state risk assessment

risk reduction strategy

Leaders understand cybersecurity risks but require that comprehensive implementation plans be built into investment proposals to make the case for investment in risk management. Our risk-reduction consulting service offering helps functional leaders build detailed plans and for investment to realize a lower risk profile.

risk program implementation

We leverage leadership commitment to significantly lower and manage the risk profile of the enterprise. With top-down commitment, we implement from the bottom-up by assessing threat vectors and realigning people, culture, processes and technology. Each of these new alignments requires us to engage in-depth with functional groups such as HR, Vendor Management, Legal, Finance, and Diversified Businesses. We assist in standing up standing up new operations to realize the target future state or risk.

compliance and audit readiness

incident management & monitoring

cyber security strategy

Our cybersecurity strategy development process encompasses comprehensive risk and information loss analysis, assessment of the current state of information and cybersecurity, endpoint and network review, and mapping for forecast future threats against the current state.  This leads to a strategy and roadmap to update and implement new security initiatives to help you protect what matters to your organization

enterprise & security architecture

enterprise data loss prevention

security program implementation

readiness for general data privacy regulations (GDPR)

The European Union General Data Protection Regulation will be in effect in May, 2018.  All businesses with access to personal information of EU citizens must demonstrate compliance and accountability to GDPR, with specific functional capabilities.  Most corporations will raise their global compliance to GDPR levels. We can make you ready for GDPR, working with HR, legal, finance, IT and other functions, to make operations run smoothly within privacy regulations.  oxgox can also help implement appropriate technological applications for data and document classification, digital rights management, and entitlement, to facilitate implementation of GDPR policies.

identity, access, data classification & document entitlement

threat & vulnerability management