Governance, Risk and Compliance.
From Risk to Evidence.
CyTech measures the organization's risk, builds the controls that answer it, and prepares the evidence its auditors, regulators and clients require.
12 Services.
One Practice.
Each service opens to what it is, what is delivered and how it runs.
The organization's cyber risk assessed with CRAM™, CyTech's method of Cyber Risk Assessment and Management.
Details →Security Program, Policies and ProceduresThe written security program an organization runs on, from charter to procedure.
Details →ISO/IEC 27001 Readiness and ImplementationAn information security management system built and prepared for certification.
Details →SOC 2 Readiness and AuditReadiness for a SOC 2 examination and the audit itself through CyTech's audit partners.
Details →PCI DSS ComplianceCompliance with the Payment Card Industry Data Security Standard for organizations that handle card data.
Details →Data Privacy Act ComplianceCompliance with Republic Act No. 10173 and the issuances of the National Privacy Commission.
Details →Third-Party Risk ManagementThe cyber risk carried by the organization's suppliers, assessed and managed.
Details →Identity and Access GovernanceWho can reach what in the organization, reviewed and governed.
Details →Cloud Security Posture AssessmentThe security configuration of the organization's cloud and SaaS estate.
Details →Data Security and DLPWhere the organization's sensitive data lives, who reaches it and how it leaves.
Details →AI Security and GovernanceThe use of artificial intelligence in the organization, secured and governed.
Details →Business Process Security AssessmentThe organization's business processes measured at the control points where they can be exploited.
Details →CRAM™ Risk Assessment
The organization's cyber risk assessed with CRAM™, CyTech's method of Cyber Risk Assessment and Management.
What Is Delivered
- Risk register in business terms
- Risk owners, appetite and tolerance
- A prioritized treatment plan
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Security Program, Policies and Procedures
The written security program an organization runs on, from charter to procedure.
What Is Delivered
- Policy set aligned to the frameworks the organization follows
- Procedures and standards for each control
- Approval, publication and annual review
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
ISO/IEC 27001 Readiness and Implementation
An information security management system built and prepared for certification.
What Is Delivered
- Scope, risk assessment and statement of applicability
- Controls implemented and evidenced
- Internal audit and certification readiness
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
SOC 2 Readiness and Audit
Readiness for a SOC 2 examination and the audit itself through CyTech's audit partners.
What Is Delivered
- Gap assessment against the Trust Services Criteria
- Control design and evidence collection
- Type I and Type II examination coordination
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
PCI DSS Compliance
Compliance with the Payment Card Industry Data Security Standard for organizations that handle card data.
What Is Delivered
- Scope and cardholder data flow
- Gap assessment and remediation plan
- Self-assessment and assessor support
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Data Privacy Act Compliance
Compliance with Republic Act No. 10173 and the issuances of the National Privacy Commission.
What Is Delivered
- Privacy management program
- Privacy notices, consent and data sharing agreements
- Data subject rights and breach procedures
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Third-Party Risk Management
The cyber risk carried by the organization's suppliers, assessed and managed.
What Is Delivered
- Supplier inventory and criticality
- Security questionnaires and evidence review
- Contract clauses and ongoing monitoring
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Identity and Access Governance
Who can reach what in the organization, reviewed and governed.
What Is Delivered
- Access reviews for users and privileged accounts
- Joiner, mover and leaver controls
- Multi-factor and identity provider configuration review
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Cloud Security Posture Assessment
The security configuration of the organization's cloud and SaaS estate.
What Is Delivered
- Configuration review against benchmarks
- Exposure of storage, keys and identities
- Remediation plan by risk
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Data Security and DLP
Where the organization's sensitive data lives, who reaches it and how it leaves.
What Is Delivered
- Data discovery and classification
- Data loss prevention policies
- Monitoring of data movement
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
AI Security and Governance
The use of artificial intelligence in the organization, secured and governed.
What Is Delivered
- Inventory of AI systems and their data
- AI use policy and risk assessment
- Controls for model, data and output risk
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Business Process Security Assessment
The organization's business processes measured at the control points where they can be exploited.
What Is Delivered
- Process maps mined from the organization's own event logs
- Control gaps and bypassed control points
- Recommendations that make each process stronger
How It Runs
Contracted and managed through The ABBA Initiative, and delivered by CyTech through its global Cyber Fusion Center and its team in the Philippines, with client information stored in the Philippines.
Delivered Globally.
Served Locally.
The CyTech Cyber Fusion Center operates globally, with a team in the Philippines serving Philippine organizations.
Client information is stored in the Philippines and handled under the Data Privacy Act of 2012.
Every engagement is contracted, invoiced and managed by The ABBA Initiative and delivered by CyTech.