MANAGEMENT CONSULTING

---

Harris & Dickey’s expert IT team members partner with CIOs, CISOs, and other executives to optimize technology spending, improve processes, and minimize risk to their organization.  Any deficiency within an organization’s IT system has the potential to create significant risk to its overall financial and operational health. 

Harris & Dickey’s IT team uses the standard frameworks, such as COBIT, NIST, COSO, and ITIL, for guidance in developing and refining GRC functions rather than creating one from scratch.  These frameworks and standards provide great building blocks that we use to tailor to any environment.  Our goal is to help identify each client’s unique risks and implement strong IT governance and controls to ensure IT alignment within the organization’s initiatives and strategies.

 
Our services include:

• Vendor and third-party risk assessments
• Enterprise risk management
• Regulatory compliance reviews

As the threats to information technology security continue to grow, the volume of IT security services, solutions, and technology is growing as well. The more links in a network’s chain, the more opportunities for hackers to find their way in. Each component requires its own security measures that constantly need to be updated, upgraded, and patched.  Unfortunately with security, there’s no one-size-fits-all approach. Most companies simply don’t have enough skilled security experts or specialized skill sets on staff to select and manage the right resources to address their security concerns. Savvy organizations are turning to Harris & Dickey to help define their strategy as well as manage and identify threats and risks. Our skilled team of IT security professionals includes well-respected subject matter experts in IT security. From full IT security assessments to technology implementations, we offer IT security services with the depth and breadth required to operate successfully in a world where everything is increasingly interconnected. 

Harris & Dickey’s IT security services include:

• Security program strategy 
• Enterprise risk and compliance strategies 
• Education and awareness IT security training 
• Threat and vulnerability assessments and penetration testing
• PCI IT Security Assessments
• Identity and access testing
• Interim CISO roles