Framework Security

BACKGROUND

Please describe your company and your position there.

I am a team-leader with Liebler, Gonzalez & Portuondo based in Fort Lauderdale, Florida. I am primarily a trial lawyer who specializes in complex commercial litigation. I am also the business liaison between our IT partners and our shareholders.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

Our firm represents several fortune 500 companies who require cutting-edge and extremely stringent cybersecurity procedures. Further our clients require extensive yearly audits about our IT and business processes and practices. We asked Framework to manage the process and work directly with the auditors to ensure the process went smoothly.

What were your goals for this project?

We wanted to see significant improvement in passage rate as well as a more streamlined process for our yearly audits. We wanted an expert to review all our documentation, make improvements, and ensure we had the right security controls in place to satisfy our auditor’s requests. Ultimately, we wanted to make sure we were following security best practices to protect our customer’s privacy.

SOLUTION

How did you select this vendor?

We were introduced to Framework Security from our IT MSP, G2 IT Solutions.

Describe the project in detail.

One the managing partners from Framework team met with our IT provider and a partner at the firm. We discussed the scope and possible challenges. Framework Security then took the lead by working directly with the auditor. As the auditor started digging deeper, Framework continued to satisfy their requests and improved our security documentation.

What was the team composition?

I worked with managing partner, Jerry Sanchez and G2 IT Solutions.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They saved our team a ton of time dealing with the auditors, so we were able to focus on the business.

How effective was the workflow between your team and theirs?

They were extremely responsive and know they worked around the clock to meet the deadlines.

What did you find most impressive about this company?

They were very effective satisfying the auditor’s need. They spoke the same language.

Are there any areas for improvement?

Nothing comes to mind.

BACKGROUND

Please describe your company and your position there.

I am the founder of Woodward Media, a consulting firm.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

I asked Framework to review my companies’ overall security risk and they went though a detailed assessment which determined what was working and what needed additional improvements to close some gaps.

What were your goals for this project?

I wanted to know that I didn’t have to worry about any potential security vulnerabilities so I could move on to run the day-to-day.

SOLUTION

How did you select this vendor?

I knew Jerry one of the managing partners for years and when we decided to launch his own company, I knew his firm was the one I trusted.

Describe the project in detail.

The Framework team was awesome to work with. They guided me through the process thought quick and easy interview style meetings. Once that was done, they managed the rest. I was presented a detailed report with an easy to understand scoring and recommendations for improvement. In the end, I asked them also to implement the needed changes.

What was the team composition?

It’s a small but very effective team. While I worked primarily with Jerry, the team member is Europe was also very helpful when I had GDPR questions.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

There were a few quick wins that drastically improved not only my security but the workflow within my team. I initially was concerned that additional security measures meant it could slow down our productivity. In the end, Framework chose the right software solutions for my size and budget.

How effective was the workflow between your team and theirs?

They were quick to react and were always on the ball. They are very technical but also understand the competing priorities of the business.

What did you find most impressive about this company?

It was cost effective, easy, and simply fun to knock out the ssies.

Are there any areas for improvement?

Not many recommendations as of now but if I think add it later on.

BACKGROUND

Please describe your company and your position there.

Rephyr offers Real Estate Professionals tools to help them demonstrate their value and stay organized. I am the CEO/Founder.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

Prior to launch, we needed an evaluation of our overall security.

What were your goals for this project?

We wanted to be confident that we were secure. Any place where vulnerabilities were discovered, we wanted pragmatic solutions as to how we could remediate the issue.

SOLUTION

How did you select this vendor?

We evaluated three vendors. Framework Security made the most sense for our needs.

Describe the project in detail.

We received a comprehensive audit with a focus on OWASP top 10. Each vulnerability discovered was accompanied by pragmatic remediation advice.

What was the team composition?

I interfaced directly with Jerry. I do not know how many people were supporting him on his end.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

A number of OWASP to 10 vulnerabilities were remediated due to this engagement.

How effective was the workflow between your team and theirs?

The workflow was highly effective. Expectations were set at the beginning of the engagement and regular communication occurred throughout.

What did you find most impressive about this company?

The level of pragmatism of the advice offered. Security companies can often be theoretical in their approach, not Framework Security. They helped me and my team focus on what really matters.

Are there any areas for improvement?

We had some issues with the conference calling technology they used. I am not sure what could be done, but it did cause a few meetings to start late.

BACKGROUND

Please describe your company and your position there.

I am the owner of Bald Ginger, a financial consulting firm.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

I hired the Framework Security team to provide me with a risk assessment which highlighted the existing effective security controls and areas in need of improvement. They were able to inform me of the potential external threats and provided solutions that mitigated the gaps.

What were your goals for this project?

The goals of this project were to highlight the potential security vulnerabilities via a risk assessment, close the gaps, and implement software solutions that could better protect my business.

SOLUTION

How did you select this vendor?

I knew Jerry the founder from working together in the past. I knew to call him for any help regarding cybersecurity.

Describe the project in detail.

The Framework team was quick to schedule online video conferences where they discussed what the objectives were, how they were going to tackle the gaps in my cybersecurity, and what I could expect.

I truly did not have to worry about the details because they handled all of it. They provide the cybersecurity support I needed to secure my business from potential threats.

What was the team composition?

They have about 5 people. I was mainly involved with the founder because he was the cybersecurity expert who personally dealt with my case. He would consult with his other team members when it was necessary to push my company's agenda.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The risk assessment was a success, having a fractional CISO made the process easier, learning about the new products my company could utilize was informative, and overall I feel confident about the integrity of my company's cybersecurity program.

How effective was the workflow between your team and theirs?

The workflow between Framework and Bald Ginger was extremely efficient.  I was able to get them on the phone at anytime. Whenever I needed a briefing, the partners was always quick to set up a meeting. Communication was never a problem.

What did you find most impressive about this company?

This company really impressed me with their customer service and cybersecurity solutions they provided.

I was excited to have a fractional CISO handle my company's cybersecurity needs because it was one less thing I had to worry about. For a company of fewer than ten people, the speed at which they operated at impressed me.

Are there any areas for improvement?

Not many recommendations as of now but if I think add it later.

BACKGROUND

Please describe your company and your position there.

I'm the founder and president of an international consulting practice with clients around the world.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

We send and receive confidential documents and information online and around the world. We must have security and accessibility to our clients without concern about who is able to see these communications

What were your goals for this project?

Assess and upgrade our security so that calls, emails, and all related technology channels are up and running smoothly and without concern for the potential security of these systems and processes

SOLUTION

How did you select this vendor?

I have worked with Jerry, the founder, in the past and his new company is perfectly suited to our small business. We are thrilled to be able to take advantage of his enormous skill and expertise.

Describe the project in detail.

Framework thoroughly reviewed (and tested) our entire technology platform looking for

1. vulnerabilities
2. areas for improvement
3. potential technology upgrades and opportunities
4. execution of our agreement to 'fix' all areas

What was the team composition?

Because of our small size (less than 10 staff) Jerry Sanchez was easily able to do all of this work on his own. He provides a total sense of confidence and professionalism.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We identified three areas of vulnerabilities and each was 'fixed' with new levels of confidence and easy of use of all aspects of our technology platform.

How effective was the workflow between your team and theirs?

Excellent~! Easy to work with; accommodating to our timing and schedules, and thoughtful and thorough communications. All business is 'people business' and Framework knows this and they are consummate professionals and very customer focused.

What did you find most impressive about this company?

They are very customer-focused and sensitive to our business needs.

Are there any areas for improvement?

None that I can recommend at this point.

BACKGROUND

Please describe your company and position.

I am the JR System Admin of a construction company 

Describe what your company does in a single sentence.

Steel Construction

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Framework Security to accomplish?

• To help us decrease our cyber risks

SOLUTION

How did you find Framework Security?

• Online Search
• Referral

Why did you select Framework Security over others?

• High ratings
• Referred to me
• Company values aligned

How many teammates from Framework Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

They have helped us get our cyber security leveled up, BIG JOB. They also helped through consulting and helping us find good partners for what we were not able to do ourselves.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We have been more alert to what cyber risks the company is encountering

We have migrated from local controllers to cloud

We have integrated tools to help keep our company more secure

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They have been very open and professional and we have always been able to reach out to them when we needed to. 

What was your primary form of communication with Framework Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They're willing to help whenever we need them.

Are there any areas for improvement or something Framework Security could have done differently?

I haven't noticed anything, they are always helpful when we are needed another perspective.

BACKGROUND

Please describe your company and position.

I am the Marketing Manager of the company

Describe what your company does in a single sentence.

Search Engine Optimization

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Framework Security to accomplish?

• Cyber Security

SOLUTION

How did you find Framework Security?

• Online Search

Why did you select Framework Security over others?

• High ratings
• Company values aligned

How many teammates from Framework Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

saved our IT Infrastructure from ransomware and malware attacks. Due to the increase in various types of attacks, this is a must-product for IT Companies.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• We love Application security and Offensive security. We like it because it involves breaking and securing applications and systems in a most thrilling and technical way.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered items on time. They respond to our needs via emails and their response time is outstanding.

What was your primary form of communication with Framework Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They handled security-related issues in a very professional way.

Are there any areas for improvement or something Framework Security could have done differently?

No areas for improvement are needed.

BACKGROUND

Please describe your company and position.

I am the President of Exit88

Describe what your company does in a single sentence.

Exit88 provides Managed Technology Services, Media Production, and Brand Development.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Framework Security to accomplish?

• Cybersecurity Assessment
• Penetration Testing

SOLUTION

How did you find Framework Security?

• Online Search
• Clutch Site

Why did you select Framework Security over others?

• High ratings
• Great culture fit
• Good value for cost
• Company values aligned

What was the size of Framework Security’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Cybersecurity Assessment and Penetration Testing. The primary deliverable is perpetual access to a list of controls and recommendations based on the assessment and pen testing.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• The controls identified in the report deliverable alongside the recommendations.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project Management was top-tier.

What was your primary form of communication with Framework Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their communication, consideration, and attention to detail were impressive.

Are there any areas for improvement or something Framework Security could have done differently?

No.

BACKGROUND

Please describe your company and your position there.

I am the Security Lead of a software development company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

To add to our ISO 27001:2013 certification and SOC2 Type II Examination, we contracted Framework Security to perform external penetration testing.

SOLUTION

How did you select this vendor and what were the deciding factors?

The VP Infrastructure had previous experience with Framework Security.

Describe the project in detail and walk through the stages of the project.

Framework Security performed a thorough penetration test on a list of external IPs we provided. They provided us with a very detailed report as to their findings and suggestions that was written in an easy to understand format.

How many resources from the vendor's team worked with you, and what were their positions?

Framework Security has a team that handles the penetration tests. All of our communication was with Jerry, Managing Partner.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

From our Letter of Attestation: "During testing, the security team found that the design and implementation of the overall architecture of the environment was carried out with security best practices in mind. Upon completion of testing, there were no vulnerabilities with a critical or high industry defined rating. None of the vulnerabilities could be exploited by the pen testing team."

How effective was the workflow between your team and theirs?

Communication was well attended to and the project took about 2.5 weeks, from initial kick-off call to penetration test being performed/completed.

What did you find most impressive or unique about this company?

The team was easy to work with and very professional. They perform thorough testing and provide results that are easy to read/understand.

Are there any areas for improvement or something they could have done differently?

No recommendations for areas of improvement.

BACKGROUND

Please describe your company and your position there.

President and CEO of a financial consulting firm.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

To safeguard overall portfolios consisting of accounts receivables, inventory, and operating assets.

SOLUTION

How did you select this vendor and what were the deciding factors?

After an exhaustive search, I was highly recommended to use Framework Security.

Describe the project in detail and walk through the stages of the project.

I needed to protect my valuable balance sheet assets.

How many resources from the vendor's team worked with you, and what were their positions?

I worked with the founder, Jerry.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Fortunately, the precautions taken under Framework Security parameters have ensured complete and total cybersecurity measures.

How effective was the workflow between your team and theirs?

Quite effective — all members of the team gave equal inputs to accomplish the common goals.

What did you find most impressive or unique about this company?

We are impressed with their teamwork, operational efficiency, and innovative solutions.

Are there any areas for improvement or something they could have done differently?

None. Total and total unequivocal results!