Framework Security

BACKGROUND

Please describe your company and your position there.

I'm the founder of a software company that provides cloud intake solutions to the legal field.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

We were looking for someone to come in and find vulnerabilities in our flagship SaaS product, fix those issues, and guide our developers in using best security practices during the development process.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online and researched various security firms. Framework fit what we were looking for.

Describe the project in detail and walk through the stages of the project.

The perfomed a thorough security audit of our web application and identified potential risks. They performed penetration testing to check for vulnerabilities. They outlined a course of action for fixing those vulnerabilities, performed many of the fixes themselves, and provided security recommendations.

They also met with the developers to ensure the developers were following those recommendations.

How many resources from the vendor's team worked with you, and what were their positions?

We had a primary virtual CISO, a case manager, and penetration testers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identity risks, mitigate those risks, advise our developers on best practices and ensure compliance, and generally provided us peace of mind.

How effective was the workflow between your team and theirs?

The kept us updated, finished work on time always, checked in regularly, and followed up regularly.

What did you find most impressive or unique about this company?

They're highly professional, highly competent, and were able to give us the service we needed at price point we could afford. Jerry, who was our CISO was dogged in his approach to ensuring our developers followed best practices even though there was some resistence to this in the beginning, and this was much appreciated.

Are there any areas for improvement or something they could have done differently?

I can't think of anything.

BACKGROUND

Please describe your company and your position there.

I own an accounting firm and want to rest assured I am doing all I can to protect client data while tax preparation fraud is on the rise.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

I began searching for a cybersecurity firm that could help me understand if the software vendors and 3rd parties I am utilizing for are adhering to cybersecurity best practices as well.

SOLUTION

How did you select this vendor and what were the deciding factors?

After contacting nearly a dozen companies and receiving slow or no responses, I found Framework Security by their 5 Star reviews.

Describe the project in detail and walk through the stages of the project.

The Framework team phoned me within minutes of filling out a contact form (which I was struggling to get other providers to do), coordinated a virtual meeting to discuss our needs in less than 2 hours, built trust, reassured me that they could help, and had a proposal to me by the end of the day.

How many resources from the vendor's team worked with you, and what were their positions?

I worked with managing partners, Jerry Sanchez and Tara Anderson.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They proposed a CIS18 Assessment to help me understand where my, my IT Service Provider’s, and my Third Party Provider’s cybersecurity practices were Strong, Satisfactory, and Needing Improvement along with the steps and assistance to remediate on the findings.

How effective was the workflow between your team and theirs?

They performed external penetration testing on my site along with my vendors and solution providers, worked with the IRS on my behalf, and provided an attestation letter of the health of my cybersecurity/privacy practices.

What did you find most impressive or unique about this company?

I was operating without delay very quickly and I am very satisfied with the work they completed. I will be recommending them to the tax associations I belong to and my colleagues in the industry.

Are there any areas for improvement or something they could have done differently?

No issues. They performed perfectly!

BACKGROUND

Please describe your company and your position there.

I am Sr. manager IT Infrastructure.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

1. We contracted with Framework to assess our company’s overall security posture using the NIST CSF standard and perform an external pen test.
2. We reviewed a few companies to perform an assessment. We wanted to find the best fit since it was an important goal to review our infrastructure and policies. In the end, it was critical to ensure that we are protecting our IP and data.

SOLUTION

How did you select this vendor and what were the deciding factors?

We discovered Framework Security by searching for the best partner. They were the best fit based on availability, cost, and technical knowledge.

Describe the project in detail and walk through the stages of the project.

The Framework team shared their proposal and we agreed on the schedule. We filled out a self-questionnaire that detailed how we are mitigate the controls listed in the NIST CSF framework. Framework reviewed that information and we scheduled a couple meetings to discuss.

They then prioritized the controls that should be the first items we address. For each control they listed recommended actions and solutions along with the costs.

How many resources from the vendor's team worked with you, and what were their positions?

I worked with managing partners, Jerry and Erkan.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They delivered a completed assessment along with the roadmap to improve our overall security.

How effective was the workflow between your team and theirs?

They came to our offices to kick off the engagement and then performed the rest remotely. They easily understood our technology in place and provided solutions that were the best bang for our buck.

What did you find most impressive or unique about this company?

The results were exactly what we were looking for. We are going to use the next year for our assessment and pen test.

Are there any areas for improvement or something they could have done differently?

No issues that come to mind.

BACKGROUND

Please describe your company and your position there.

I am the CEO of a property management company

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

We became concerned about our security after a few questionable bank transactions. We certainly didn’t have the expertise to determine if we were hacked but the bigger question was what do we need to prevent any issue in the future.

What were your goals for this project?

We didn’t know where to start finding a company that would work with our size. I called around and didn’t have the best luck with companies understanding our needs and explaining what how I could actually use their services. When I talked to Framework Security, I felt they got it and proposed a streamlined approach to deal with my current problem.

SOLUTION

How did you select Framework Security?

We discovered Framework Security online. They immediately jumped in and gave me a step-by-step plan to deal with the bank issues.

Describe the project in detail.

I elected to hire them for their retainer model. It gives me the assurance that my company is has the right software installed and set me up with training to ensure my staff are taking the correct actions to prevent us from being hacked.

What was the team composition?

I worked the managing partners, Jerry and Larry.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They delivered a detailed report of what could be improved, along with the timelines and costs to resolve the “gaps."

How effective was the workflow between your team and theirs?

Jerry was awesome to work with, although technical explained things in straight business terms. Larry eased my worry and my staff loved the security awareness training.

What did you find most impressive about this company?

We felt we didn’t need a large IT management team, since we think we are pretty savvy when it comes to the normal stuff, but had no knowledge of security. They are the perfect fit for our needs.

Are there any areas for improvement?

They weren’t the least expensive, but I can see why. They rock and gave me the peace of mind I was looking for.

BACKGROUND

Please describe your company and your position there.

I am the President and CEO of Volo Solutions. We provide guest experience & engagement tablets for the hospitality and healthcare industries. We currently service the United States and Canada.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

As a provider of hospitality mobile applications, we wanted to safeguard our customer’s data so we needed a security audit.

What were your goals for this project?

Primary goal was to safeguard our customer’s data - we reviewed a few companies to perform an assessment. We wanted to find the best fit since it it was a critical process for our company.

SOLUTION

How did you select Framework Security?

We found Framework Security through our network. They were the best fit based on availability, cost, and technical knowledge.

Describe the project in detail.

The Framework team shared their proposal and we agreed on the schedule. They reviewed our mobile and web apps. They selected the best tools for the job and their engineer ran through the testing. We received comprehensive reports and suggestions to mitigate any security concerns.

What was the team composition?

We worked with a managing partner, Jerry, and an engineer, Max.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They delivered a completed assessment along with the roadmap to improve our overall security.

How effective was the workflow between your team and theirs?

They easily understood our technology in place and provided solutions that were the best bang for our buck.

What did you find most impressive about this company?

The results were exactly what we were looking for. We are going to continue to use their Virtual CISO service to continue to improve our overall security posture. Their team worked diligently to address our concerns with very easy communication.

Are there any areas for improvement?

I can't imagine I would change anything except I wish I had found Framework before speaking with any other companies. I would use them again in a heartbeat, and have highly recommended their work to others.

BACKGROUND

Please describe your company and your position there.

President - Owner of Company We specialize in creating direct mail fundraising campaigns for nonprofit organizations. We currently work with over 250 nonprofits.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

For a total Cybersecurity assessment and to assist us in being compliant with the new privacy laws the State of California is implementing. We asked Framework to assess our agency’s overall security posture and create a roadmap for improvements.

What were your goals for this project?

We wanted an expert to review all the security controls to protect our customer’s data. In addition, we wanted to make sure we were following security best practices. Ultimately, we wanted to protect our customer’s privacy.

SOLUTION

How did you select this vendor?

We found Framework Security on Clutch and after requesting proposals from many other companies. After review, we found they were exactly what we were looking for.

Describe the project in detail.

One of the managing partners The Framework team walked us through the timeline estimate and steps. We filled out a questionnaire around our IT environment. There were several status updates after he talked to a few of our vendors to get a better understanding of the gaps.

At the end, they delivered a prioritized roadmap with a clear list of next steps. Some of action items listed we could perform internally, our other vendors, or Framework themselves.

What was the team composition?

I primarily worked with managing partner, Jerry Sanchez.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They gave us the plan to greatly increase our overall security.

How effective was the workflow between your team and theirs?

They were very knowledgeable about our business model and the technology we have in place. They were also very flexible with our schedules.

What did you find most impressive about this company?

I was surprised by how easy the whole process was. It gave me the peace of mind we are doing all the right things to secure our systems.

Are there any areas for improvement?

I can’t think of anything at the moment. It was very reassuring that Jerry had everything worked out in a road map and guided us through the steps, we found him very helpful, accessible and knowledgeable, Iv'e already recommended his services to other business owners I have relationships with.

BACKGROUND

Please describe your company and your position there.

I am a team-leader with Liebler, Gonzalez & Portuondo based in Fort Lauderdale, Florida. I am primarily a trial lawyer who specializes in complex commercial litigation. I am also the business liaison between our IT partners and our shareholders.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

Our firm represents several fortune 500 companies who require cutting-edge and extremely stringent cybersecurity procedures. Further our clients require extensive yearly audits about our IT and business processes and practices. We asked Framework to manage the process and work directly with the auditors to ensure the process went smoothly.

What were your goals for this project?

We wanted to see significant improvement in passage rate as well as a more streamlined process for our yearly audits. We wanted an expert to review all our documentation, make improvements, and ensure we had the right security controls in place to satisfy our auditor’s requests. Ultimately, we wanted to make sure we were following security best practices to protect our customer’s privacy.

SOLUTION

How did you select this vendor?

We were introduced to Framework Security from our IT MSP, G2 IT Solutions.

Describe the project in detail.

One the managing partners from Framework team met with our IT provider and a partner at the firm. We discussed the scope and possible challenges. Framework Security then took the lead by working directly with the auditor. As the auditor started digging deeper, Framework continued to satisfy their requests and improved our security documentation.

What was the team composition?

I worked with managing partner, Jerry Sanchez and G2 IT Solutions.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They saved our team a ton of time dealing with the auditors, so we were able to focus on the business.

How effective was the workflow between your team and theirs?

They were extremely responsive and know they worked around the clock to meet the deadlines.

What did you find most impressive about this company?

They were very effective satisfying the auditor’s need. They spoke the same language.

Are there any areas for improvement?

Nothing comes to mind.

BACKGROUND

Please describe your company and your position there.

I am the founder of Woodward Media, a consulting firm.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

I asked Framework to review my companies’ overall security risk and they went though a detailed assessment which determined what was working and what needed additional improvements to close some gaps.

What were your goals for this project?

I wanted to know that I didn’t have to worry about any potential security vulnerabilities so I could move on to run the day-to-day.

SOLUTION

How did you select this vendor?

I knew Jerry one of the managing partners for years and when we decided to launch his own company, I knew his firm was the one I trusted.

Describe the project in detail.

The Framework team was awesome to work with. They guided me through the process thought quick and easy interview style meetings. Once that was done, they managed the rest. I was presented a detailed report with an easy to understand scoring and recommendations for improvement. In the end, I asked them also to implement the needed changes.

What was the team composition?

It’s a small but very effective team. While I worked primarily with Jerry, the team member is Europe was also very helpful when I had GDPR questions.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

There were a few quick wins that drastically improved not only my security but the workflow within my team. I initially was concerned that additional security measures meant it could slow down our productivity. In the end, Framework chose the right software solutions for my size and budget.

How effective was the workflow between your team and theirs?

They were quick to react and were always on the ball. They are very technical but also understand the competing priorities of the business.

What did you find most impressive about this company?

It was cost effective, easy, and simply fun to knock out the ssies.

Are there any areas for improvement?

Not many recommendations as of now but if I think add it later on.

BACKGROUND

Please describe your company and your position there.

Rephyr offers Real Estate Professionals tools to help them demonstrate their value and stay organized. I am the CEO/Founder.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

Prior to launch, we needed an evaluation of our overall security.

What were your goals for this project?

We wanted to be confident that we were secure. Any place where vulnerabilities were discovered, we wanted pragmatic solutions as to how we could remediate the issue.

SOLUTION

How did you select this vendor?

We evaluated three vendors. Framework Security made the most sense for our needs.

Describe the project in detail.

We received a comprehensive audit with a focus on OWASP top 10. Each vulnerability discovered was accompanied by pragmatic remediation advice.

What was the team composition?

I interfaced directly with Jerry. I do not know how many people were supporting him on his end.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

A number of OWASP to 10 vulnerabilities were remediated due to this engagement.

How effective was the workflow between your team and theirs?

The workflow was highly effective. Expectations were set at the beginning of the engagement and regular communication occurred throughout.

What did you find most impressive about this company?

The level of pragmatism of the advice offered. Security companies can often be theoretical in their approach, not Framework Security. They helped me and my team focus on what really matters.

Are there any areas for improvement?

We had some issues with the conference calling technology they used. I am not sure what could be done, but it did cause a few meetings to start late.

BACKGROUND

Please describe your company and your position there.

I am the owner of Bald Ginger, a financial consulting firm.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Framework Security?

I hired the Framework Security team to provide me with a risk assessment which highlighted the existing effective security controls and areas in need of improvement. They were able to inform me of the potential external threats and provided solutions that mitigated the gaps.

What were your goals for this project?

The goals of this project were to highlight the potential security vulnerabilities via a risk assessment, close the gaps, and implement software solutions that could better protect my business.

SOLUTION

How did you select this vendor?

I knew Jerry the founder from working together in the past. I knew to call him for any help regarding cybersecurity.

Describe the project in detail.

The Framework team was quick to schedule online video conferences where they discussed what the objectives were, how they were going to tackle the gaps in my cybersecurity, and what I could expect.

I truly did not have to worry about the details because they handled all of it. They provide the cybersecurity support I needed to secure my business from potential threats.

What was the team composition?

They have about 5 people. I was mainly involved with the founder because he was the cybersecurity expert who personally dealt with my case. He would consult with his other team members when it was necessary to push my company's agenda.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The risk assessment was a success, having a fractional CISO made the process easier, learning about the new products my company could utilize was informative, and overall I feel confident about the integrity of my company's cybersecurity program.

How effective was the workflow between your team and theirs?

The workflow between Framework and Bald Ginger was extremely efficient.  I was able to get them on the phone at anytime. Whenever I needed a briefing, the partners was always quick to set up a meeting. Communication was never a problem.

What did you find most impressive about this company?

This company really impressed me with their customer service and cybersecurity solutions they provided.

I was excited to have a fractional CISO handle my company's cybersecurity needs because it was one less thing I had to worry about. For a company of fewer than ten people, the speed at which they operated at impressed me.

Are there any areas for improvement?

Not many recommendations as of now but if I think add it later.