Regulations such as SOX, PCI, HIPAA, FFIEC, FISMA, NERC-CIP, GDPR and others have evolved to ensure accountability and privacy. The challenge in managing risk and adhering to these complex regulations can be burdensome but the cost of noncompliance can be the loss of an entire enterprise.

Chorus Consulting can provide a “Data Security Risk Assessment” of the what, where, and who of your data assets. Alongside an understanding of the security measures your organization has in place, a Data Security Risk Assessment is an important step of discovering, correcting and preventing security problems.

We utilize specialized automated utilities to locate, classify and “risk rank” all data that exists across the enterprise in an unstructured or semi-structured status. It classifies all data using NIST standards and assigns a numerical “risk score” to each NIST classification. We deliver a full suite of services to clients that will address data governance, breach, risk management, or operational needs (such as acquisition or contract management).

We can answer the critical questions: What data do you process or store that regulators classify as confidential or sensitive; Where is this data located; and Who has access to this data?

We can help you remediate your current situation: Automatically identify and classify unencrypted sensitive data; Monitor in “real time” unencrypted sensitive data; Move, copy, or delete unauthorized, duplicative, or unnecessary data.