Disaster Recovery Consulting Support
For Businesses of All Sizes:
CRISC-certified Risk Management Consultants
Managing IT Risk: CRISC Certification for Controlling Information System Risk
The CRISC credential (Certified in Risk and Information Systems Control) was created by the Information Systems Audit and Control Association (ISACA) to certify an IT professional's ability to assess information system risk and implement risk management control solutions that support an enterprise's business goals. CRISC certification signifies a combination of deep technical knowledge, broad business understanding, plus years of relevant work experience.
Progent offers the expertise of a CRISC-certified consultant who can help you create and implement a modern risk management strategy based on best practices promoted by CRISC and geared to align with your company's risk tolerance, business objectives, and IT budget. Progent's CRISC-certified risk management consultants expand the skills of other cybersecurity and information assurance experts whose services are available from Progent. These specialists include Progent's CISA-certified cybersecurity audit consultants, who can objectively review your IS control design and operational effectiveness, and Progent's CISM-certified security management experts, who can evaluate your network security profile or implement enterprise-wide cybersecurity.
Progent's Support for CRISC Practice Domains
The CRISC certification program verifies a candidate's work experience and exhaustively tests skills in key practice areas of risk management:
- Risk identification
- Risk assessment
- Risk response and mitigation
- Risk and control monitoring and reporting
Risk Identification
This facet of enterprise risk management involves cataloging a comprehensive set of IT risks to be addressed by an enterprise risk management plan that takes into account business objectives. Consulting services available from Progent in this practice area include:
- Gather all information garnered from interviews or documentation that can help identify and quantify areas of risk to business processes and network operation
- Evaluate the potential monetary or productivity loss that could result from various risk scenarios
- Review the impact that applicable laws, regulations, compliance requirements, and business agreements have on your risk profile
- Build a risk register to catalog all identified risk factors
- Document the likelihood and potential information system damage associated with major risk scenarios
- Use advanced risk analysis tools to understand the potential impact of risk scenarios on your business objectives
- Create a risk awareness initiative that educates stakeholders on IT risk and invites their participation in creating your risk management strategy
- Find consensus for risk appetite and risk tolerance among top leadership and critical stakeholders to ensure that everyone buys into the risk management program
This area of risk management involves performing sufficient analysis of risk likelihood and impact to provide the basis for sound risk management decisions. Services offered by Progent in this area include:
- Analyze risk scenarios based on their relationship to the structure, processes, and control mechanisms of your business
- Analyze risk controls currently in place and grade their effectiveness in mitigating risk
- Review risk and control analysis data to uncover any shortcomings in your current risk management solution
- Verify that risk ownership is correctly assigned and clearly understood
- Share the results of risk assessment with associated stakeholders to drive a rational risk management plan
- Document risk assessment results in the risk register
This area of risk management concerns the selection of effective risk response activity that is within the IT budget and is in line with business objectives. Consulting services available from Progent in this area include:
- Interview risk owners to determine risk responses that support business goals
- Collaborate with risk owners to make sure the processes, cost, and scheduling of risk response plans are well defined
- Work with risk control owners to ensure that the design and deployment of risk mitigation controls are properly managed
- Assign risk control ownership clearly and openly
- Help risk control owners to create and document effective control processes
- Edit the risk register to show any changes in risk identification and response processes
- Verify that actual responses to risk have followed the risk action plans
This area of risk management concerns monitoring and management information system controls to ensure they continue to support business objectives. Progent's consulting services in this area include:
- Analyze and document your business process objectives and design to identify required information system controls
- Plan, supervise, and conduct testing to confirm continuous efficiency and effectiveness of your information system controls
- Collect information and review documentation to identify information system control deficiencies
- Review your information system policies, standards, and procedures to make sure they address your company's internal and external requirements
- Evaluate the current state of your information system processes using a maturity model to identify the gaps between current and targeted process maturity
- Determine how to correct information system control deficiencies and maturity gaps to ensure that deficiencies are appropriately considered and fixed
- Maintain adequate evidence to support conclusions on the completeness and operating effectiveness of your information system controls
- Test your information systems controls to verify their effectiveness and efficiency before they are implemented
- Deploy information systems controls
- Monitor your information systems control design and implementation process to make sure it is implemented effectively and within time, budget, and scope
- Provide progress reports on the deployment of your information systems controls to inform your stakeholders and to make sure deviations are addressed quickly
- Provide information system control status reporting to your relevant stakeholders to help them make informed decisions
- Evaluate and recommend tools to automate your information systems control processes
In addition to offering the services of security specialists with CRISC certification, Progent can also provide your business with access to CISM-certified security management consultants, CISSP-certified cybersecurity experts, CISSP-ISSAP certified cybersecurity architecture consultants, CISA-certified cybersecurity audit professionals, and GIAC-certified information assurance specialists.
Contact Progent for Access to a CRISC-certified Risk Management Consultant
To find out how to get in touch with a CRISC-certified risk management expert, phone Progent at
Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to help organizations to complete the time-critical first phase in mitigating a ransomware attack by containing the malware. Progent's remote ransomware engineer can help businesses to identify and isolate infected servers and endpoints and protect clean resources from being penetrated. If your network has been breached by any version of ransomware, act fast. Get help quickly by calling Progent's Ransomware Hot Line at 800-462-8800. For more information, visit Progent's Ransomware 24x7 Hot Line.
An index of content::
Two-factor Authentication (2FA) Outsourcing
Onsite Technical Support Multi-factor Authentication
Progent's Duo service plans incorporate Cisco's Duo technology to protect against password theft by using two-factor authentication (2FA). Duo enables one-tap identity confirmation on iOS, Android, and other out-of-band devices.
Engineers WannaCry Ransomware Cleanup
Ransomware Removal Engineers
Progent's certified cybersecurity experts can conduct security assessments of enterprise-wide security to validate your organization's cybersecurity profile compliance with key international security standards. Progent can provide ongoing managed services for security monitoring and response, on-demand network-wide security audits, and focused cybersecurity assessments for critical areas of cybersecurity like endpoints or cloud applications. Progent's qualified security consultants can also run comprehensive information security assessments to determine your company's compliance with key industry security standards such as FISMA, PCI, and ISO.
Microsoft Exchange Support
Microsoft Exchange Network Engineer
Progent's expert consultants can help you define and implement a smooth in-place Microsoft Exchange 2007 upgrade plan that avoids network disruption, simplifies ongoing service demands, and makes your Exchange Server 2007 easy to manage. For complicated multi-server or multi-site upgrades, Progent offers the experience to finish your move quickly and economically. Progent's Microsoft Exchange 2007 support, troubleshooting, and consulting services include assistance with the integration of third-party add-ons to Exchange 2007 Server that are in keeping with your business needs.
Microsoft SQL Server Help Center
Top SQL Server Application Support
Progent's Microsoft-certified SQL Server application developers and database administrators can provide remote expertise to assist businesses of all sizes to build, manage, and troubleshoot applications powered by the Microsoft SQL Server platform and .NET architecture. Progent's SQL Server experts can provide help with any facet of application development in environments that range from small office databases to N-tier VLDB applications and data warehousing.
Security Certification Penetration Testing
Security Penetration Testing Cybersecurity Team
Stealth intrusion testing is a key part of any comprehensive IT system security plan. Progent's security experts can run thorough penetration tests without the awareness of your organization's in-house IT resources. Stealth penetration checking uncovers whether existing security monitoring systems such as intrusion detection warnings and event history analysis are correctly set up and consistently observed. Progent can implement continuous automatic penetration testing to define your internal/external attack surface and to detect ways that exploitable vulnerabilities, unsafe configurations, compromised credentials, missing patches, and unsound IT product defaults can be chained together by threat actors into the multi-vector attacks typical of modern strains of ransomware.
24/7/365 QTS/Herakles Data Center Consulting
Consultant QTS Colocation Center
The QTS Colocation Center facility is situated in the earthquake-neutral Natomas area of Sacramento, CA. If your company is currently using the QTS Sacramento data center as a colocation site or if your company is considering moving your primary or disaster recovery equipment to the Herakles data center, Progent can provide a range of cost-effective services that include colocation migration, equipment installation and upgrades, network improvements, comprehensive project management services, virtualization configuration, remote monitoring, automated network administration, application development, disaster recovery planning and testing, data security evaluation, and the use of the Progent Test Lab.
Activesync Consultants
24-7 Support Wireless EMail
Progent's professionals offer expertise in a variety of technologies relevant to mobile connectivity including network infrastructure, Activesync, wireless protection, wireless email, Microsoft Windows Mobile, Research in Motion Blackberry, and wireless software programming. Progent's certified professionals can save your business work and expense by applying their wireless experience to help you choose and configure wireless networking solutions that make sense for your company. Progent can also tune your network infrastructure so that wireless PDAs perform better.
Dynamics GP/Great Plains Configuration
Dynamics GP IT Services
Progent's Microsoft certified consultants offer a variety of support services for Microsoft Dynamics GP/Great Plains. Dynamics GP/Great Plains is a Microsoft accounting package and corporate management tool built, like all Microsoft accounting tools, on the scalable and familiar platform of Microsoft Windows technology. Dynamics GP/Great Plains 2010, the most recent version of Microsoft accounting software in the Microsoft Dynamics GP family, provides an affordable tool for managing and combining finances, e-commerce, supply chain, manufacturing, project accounting, field service, CRM, and human resources. Microsoft Dynamics GP/Great Plains is easy to install and integrate, and with its segmented approach you can purchase only the capability you currently require, with the option to add clients and enlarge capabilities when necessary. Progent's Microsoft Dynamics GP/Great Plains Software support experts can help you deploy, configure and administer Microsoft Dynamics GP 2010 as well as earlier versions of Dynamics GP.
After Hours Apple Mac and Windows coexistence Online Help
Remote Consulting Apple Mac and Windows coexistence
Progent's service specialists in Apple OS X and Microsoft Windows technology can show you how to integrate Apple Macintosh and Windows computers into seamless networks with full sharing and collaboration functionality. Enabling productive co-existence among a variety of servers and desktops powered by Mac OS and Windows requires extensive knowledge of and background with Apple Macintosh and Microsoft products. Progent's background in Microsoft and Macintosh consulting makes it possible to provide expert support to businesses that depend on these technologies to maintain their strategic advantage. Progent can also assist your business to integrate Apple's iPhones and iPads with your Windows environment.
Exchange Server 2007 Network Consulting
Microsoft Exchange IT Consultant
Progent's Microsoft certified consultants can help you define and implement an efficient in-place Microsoft Exchange 2007 migration strategy that avoids productivity disruption, reduces ongoing service requirements, and makes your Microsoft Exchange 2007 Server easy to manage. For complex multi-server or multi-site upgrades, Progent offers the knowledge and experience to finish your project quickly and affordably. Progent's Exchange 2007 support, repair, and consulting services include expertise with the configuration of third-party enhancements of Exchange 2007 Server and the creation of unified messaging solutions powered by Microsoft Exchange 2007 Server.
wireless VoIP phone and Aironet APs Online Consulting
wireless VoIP phone integration Integration Services
Progent's Cisco wireless VoIP phone configuration and troubleshooting consultants can provide online and on-premises support to help your organization create and maintain a Cisco Wi-Fi VoIP phone solution by delivering services that can range from debugging the configuration of a wireless VoIP phone or AP to providing project management outsourcing or co-sourcing services for modernizing the Wi-Fi architecture of an entire campus.
Select Topic: