Security posture assessment
An honest look at how exposed you are today, across people, process and technology, with the risks ranked.
- Posture and attack-surface review
- Risk ranked by business impact
- Clear first moves
Nonodon Cybersecurity · Full cycle
Full-cycle cybersecurity, built to last.
Security posture, program maturity, process and staff, compliance and consulting from CISSP and CCSP certified practitioners. Nonodon finds where you stand, closes what matters, grows your processes and your people, gets you through the gates you face, and stays on as your advisor.
The full cycle
More than compliance. The whole security life cycle.
Compliance is one stop on the way. A strong program assesses, hardens, matures, builds up its people, proves itself and keeps getting better.
01
Assess
Know your real security posture and where the risk sits.
02
Harden
Close the gaps that matter most, in the order that matters.
03
Mature
Turn fixes into a program that measures and improves itself.
04
Enable
Build up your processes and your people so they own it.
05
Comply
Clear the gates your customers and regulators require.
06
Advise
Stay on as your advisor as threats, rules and the business change.
Compliance
When there is a gate to clear, we get you through it.
CMMCLevel 1 and Level 2 readiness for defense contractors, including the NIST SP 800-171 controls behind it
NIST 800 series and CSFSP 800-53 controls mapped and a measured program running
FedRAMPCloud service readiness for federal customers
SOC 2Controls and evidence ready for Type 1 and Type 2 audits
PCI DSSProtecting cardholder data, including version 4.0.1
HIPAA and HITRUSTProtecting patient data without slowing care
ISO 27001An information security management system that holds up
GDPRPersonal data handled the way EU and UK rules require
Services
Every part of the cycle, built with you.
For healthcare, financial services, industrial and software companies, in the cloud and on site.
Program maturity
Measure where your security program sits on a recognized maturity model and build the roadmap to the next level.
- Maturity baseline
- Multi-year roadmap
- Progress you can measure year over year
Process and staff enrichment
Stronger processes and a stronger team, so security is part of how work gets done, not an add-on.
- Playbooks and procedures your team owns
- Training, coaching and tabletop exercises
- Security awareness that sticks
Security consulting and advisory
A senior security advisor on your side for a project, a decision or the long haul.
- Strategy and architecture advice
- Vendor and investment reviews
- Ongoing advisory retainers
Fractional and interim leadership
A fractional or interim CISO who runs the security program until your own team is ready to.
- Program leadership and roadmap
- Executive and board briefings
- Assessment-day support
Governance, risk and policy
A security program the business can run, with risk measured and policies people actually follow.
- Risk assessments and risk register
- Policies and procedures with owners
- Board-ready risk reporting
Compliance readiness
Measure where you stand against the framework you have to meet, and get a ranked list of what to close first.
- Scoping of systems and data in play
- Control-by-control gap findings
- Ranked remediation plan
SSP, POA&M and evidence
Write the system security plan and POA&M, then tie every requirement to evidence an assessor can check.
- System security plan
- Plan of action and milestones
- Evidence ready for external audits
Identity and access
Only the right people get in, and admin rights exist only while they are needed.
- No standing admin access
- Accounts that open and close on time
- Access reviews you can show an auditor
Incident response, continuity and recovery
See threats early, respond fast, and keep the business running through an outage.
- Monitoring, alerting and response plans
- Business continuity and tested disaster recovery
- Account takeover and fraud detection
Cloud security and Zero Trust
Cloud, hybrid and on-site environments designed so access is earned, not assumed.
- Cloud security architecture
- Segmented networks and secure remote access
- Zero Trust readiness
Secure software and AI
Applications, including ones that use AI, built with security and privacy from the start.
- Secure development lifecycle
- Privacy controls for personal data
- Security review before release
How we work
We solve problems and get it done.
1
Start where you are
A posture check, a maturity goal, a compliance date or a hard decision. Any of them is a starting point.
2
See it as it really is
Look at what is actually in place, not what a policy says.
3
Fix it and grow it
Close what matters and build up the processes and people who keep it closed.
4
Stay as long as you need
Hand it over to your team, or keep us on as your advisor.
About
Nonodon Cybersecurity is part of Nonodon LLC, formed in June 2021 to bring this work together. The security experience behind it goes back to 1999. Full-cycle security, from first assessment to ongoing advice, led by certified security practitioners. Every engagement is quoted to its scope.
- CISSP
- CCSP
Request a quote
Tell us where you stand and where you want to be.
Every engagement is quoted to its scope. Share what you need, whether that is a posture check, a maturity roadmap, a compliance gate or an advisor, and any date you are working toward.