Working with CUBIC CONSULTING

1. Real-world expertise

   Our expertise is formed by decades of on-the-ground experience working with MNCs where we dealt with everything from hacktivists to espionage and cybercriminals. All while maintaining a keen business sense and managing different business units.

   1. Risk management operations

      1. Gap assessment

      2. 3rd party risk management

      3. Biz/IT project risk management

      4. Merger and acquisition

      5. Selling a business unit

   2. Risk management

      1. Risk Decision Making

      2. Risk Ownership

      3. Risk Register

      4. Risk Resource Allocation

      5. Risk Exceptions

      6. Residual Risk Tracking

2. People-centric

   As cybersecurity consultants, we are decidedly collaborative and communicative. After all, a large part of our job is fostering cooperation and teamwork between management and security teams, and getting everyone to align on business improvement, risk orientation and actionable deliverables.

   1. Reporting

      1. Board Reporting

      2. Senior Leadership Reporting

      3. Operational Reporting

      4. Regulatory Reporting

      5. Top KPI, KRI

      6. Cascaded Metrics across Organisation

   2. Management Support

      1. Board Support & Advisory

      2. Senior Management Support & Advisory

      3. CIO Support & Advisory

      4. CISO Support & Advisory

      5. Public & Government Support & Advisory

      6. Investor Support & Advisory

      7. Incident Simulation & Desktop Exercises

   3. Planning

      1. Mid range Planning

      2. Budget Planning

      3. Cybersecurity Program

      4. Strategy

      5. Security Architecture

      6. Cost Management & Optimisation

3. proactive strategies

   Managing information security in a corporate environment is complex. On one hand, there is a need for structural improvements. On the other hand, it requires real-time tacticalmanagement against offensive forces such as direct attacks and phishing attempts. Dealing with the dayto-day is necessary but focusing solely on it results in a never-ending list of changing tasks that do not contribute to long-term success. We keep both immediate needs and big-picture goals in mind, and direct your organisation to a sustainable defensive position.

   1. Policy

      1. Policies & Standards

      2. Regulatory Requirements

      3. Certifications

      4. Exception Handling

      5. Compliance Check

   2. Delivery Management

      1. Task & Project Management

      2. Security Organisation

      3. JIRA-ServiceNow Process

      4. KPI Metrics

      5. OKR

      6. Agile