Cyber cura corporation provides information risk management consulting services such as the following: + alignment of information security and data privacy programs with business plans, it plans, and/or products and services roadmaps + development of information security and data privacy strategic plans including vision, mission, multi-year objectives, and current year goals + assessment of risks, legal and standards gap identification, program maturity measurement, and practical improvement roadmap development + preparation of information security, data privacy, it audit, and compliance guidance documents - including policies, standards, procedures, work instructions, and process maps + preparation of the business case for information security and data privacy investments and projects (justification and prioritization) + optimization of information security, data privacy, it audit, and compliance organizational structures and their linkage to the rest of the organization + development and delivery of security and privacy awareness and training materials + evaluation of planned products and services (review of features vs. market needs, compliance risk evaluation, and threat modeling) + development of strategies and plans for effectively managing compliance with requirements from multiple sources (e.g., laws, regulations, and industry standards such as hipaa/hitech, glba/ffiec, 201 cmr 17.00, payment card industry data security standards, gdpr, etc.) + assistance with practical risk-based adherence to various security and privacy frameworks standards (e.g., iso 27001/27002/27005, nist 800 series, cobit, soc 1 / soc 2 readiness, opensamm, bsimm, privacy shield, generally accepted privacy principles, etc.) + fulfillment of an interim or fractional chief information security officer (ciso) or chief privacy officer (cpo) role