Cyber Security

Objective, Holistic Cyber Security Assessments for your Organization

Developing an information security posture for your organization can be overwhelming: How do you know where to start? And, which threats are a genuine concern?

CM3 Building Solutions can help. We provide objective, custom Cyber Security assessments for your organization.

With decades of experience in information security, the CM3 Team takes a holistic, risk-based approach to information security evaluation.

Led by a Certified Information Security Professional, we work with you to assess the Cyber Security maturity of your organization and then recommend a plan that fits your objectives and budget.

Actionable Solutions

Tailored Reporting

• With three levels of reporting – management, technical summary, technical detail – we help you communicate with every stakeholder, so the team can be aligned and take confident action.

Priority-based Remediation Guidance

• Prioritized, realistic recommendations enable you to move forward where you can within your budget and resources and set a path for future enhancements.

Technical Collaboration

• Whether you have an IT department or a Managed Service Provider, we work with your technical team to assess and adopt a Cyber Security

Customized Recommendations

• We don’t take a one-size-fits-all approach. Our information security proposals are customized to your unique needs, whether your organization is new to Cyber Security or already has a fully-integrated plan.

Comprehensive Services

• Baseline Assessments
• Penetration Testing
• Vulnerability Assessments
• Policies and Procedures Development
• Business Continuity Planning
• Disaster Recovery / Incident Response Planning
• Best Practices Training
• Optional Ongoing Assessments – Custom quarterly and annual plans enable continual management and enhancement of your Cyber Security posture

Industry Associations and Affiliations

• Member of The International Information System Security Certification Consortium (ISC2)
• Certified Ethical Hacker
• Member Infragard, Philadelphia Chapter
• PSA-TECH Cyber Security Committee member

Our Work

Baseline Assessments
Delivers an overview of the prevailing information security level within the organization and identifies at a high-level potential threats and opportunities for improvement.

Vulnerability Assessments
Comprehensive assessments of all equipment connected to a network with a report documenting all “cyber assets” in an organization as well as what assets are current vulnerability threats.

Penetration Testing
Also known as a pen test, evaluates the security of the entire system through an authorized simulated cyberattack on the system.

Business Continuity Planning
Identifies mission-critical services and develops a Business Continuity plan so that the organization and staff continue functioning effectively through any incident or disaster. Mission-critical services are the aspects and services of an organization that must not be lost and implementing a plan to maintain them in the event of an incident or disaster.

Incident Response Planning
A sub-service of Business Continuity Planning, Incident Response Planning creates recovery plans for mission-critical aspects of an organization, addressing how your organization will respond to a disruptive incident, or cyber attack.

Policies And Procedures Development
Ensures ongoing success in protecting your information security by identifying and documenting procedures to prevent threats, manage resolution resources in the event of a security breach, and mitigate the potential damage of a breach.

Best Practices Training
Strengthens the awareness and knowledge of each network user within the organization.

• Executive Management Training: Focuses on executive-level staff to equip them with the knowledge and tools necessary to manage their staff toward the continuing employment of network best practices.
• End User Training: Trains end-users on the organization’s network best-practices, including understanding the threats inherent when accessing a network, the safety protocols implemented to protect an organization’s information assets, and the procedures to be followed in the event of an incident or disaster.