FRACTIONAL vCISO SERVICES
FRACTIONAL vCISO SERVICES
Filament is a nonprofit that can help your organization reinforce its defenses, safeguard sensitive data and establish a robust cybersecurity strategy.
vCISO Services
The Virtual Chief Information Security Officer (vCISO) is your organization’s strategic partner. Gain access to expert guidance, cybersecurity policy development, risk management and compliance on a part-time or virtual basis. Ideal for those seeking top-tier guidance without the need for a full-time CISO.
Certified Security Analysts
Our qualified and credentialed security analysts collaborate seamlessly with your team. Get flexible, part-time access to high-level security insights, tailored cybersecurity strategies and industry-leading expertise as an annual partnership.
Framework Deployment Program
Deploy our comprehensive program and fortify your organization’s defenses. Conduct a thorough cybersecurity evaluation, train your teams, receive continuous operational guidance and establish an incident response plan.
Free, No-Risk Discovery Call
Let’s schedule a 30-minute discovery call so we can learn more about your organization’s current posture. We will help you identity the framework and services that fit your needs, outline the next steps, and issue a cost estimate.
NIST Framework Expertise
Filament Data Security Services will help translate and guide you through the deployment process for the NIST framework that’s appropriate for your organization.
NIST CSF (Cybersecurity Framework)
Designed for practical understanding, this high-level framework provides a roadmap for managing and reducing cybersecurity risk. It focuses on five core functions: Identify, Protect, Detect, Respond, and Recover.
NIST Special Publication 800-53 (SP 800-53)
This comprehensive guide for security and privacy controls specifically tailored for federal information systems. This publication organizes controls into families addressing various aspects. Some of the key control families include:
- Access Control
- Audit and Accountability
- Awareness and Training
- Incident Response
- Risk Assessment
- System and Communications Protection
- System and Information Integrity
Additional Frameworks Supported
-
- NIST 800-171
- 23 NYCRR 500
- SEC
- CMMC
- CCPA
- GDPR
- HIPAA
- ISO 27001
- CIS
- GLBA
- SOX
Filament Security Services has been instrumental in helping us develop and implement the security policies for NEONET and its school districts. Art and his team have saved us time and effort with their knowledge and experience. We’ll continue to partner with Filament Security Services. They have been an enormous help to our team!
Supplemental Support
Apptega: Your GRC Platform
Meet Apptega, your Governance, Risk Management, and Compliance (GRC) platform. You can gain access to this tool to simplify and streamline your cybersecurity processes effortlessly. Assess your cybersecurity posture, track compliance, and collaborate seamlessly, all within our user-friendly and centralized platform.
Penetration Testing
Penetration Testing is like hiring a friendly hacker to check for weak points in your computer system. They simulate real attacks to find any vulnerabilities that could let bad guys in. The goal is to fix these weaknesses before actual hackers find and exploit them.
Vulnerability Scans
Vulnerability Scans are like using a tool to automatically check your computer for any known problems or open doors that hackers could use. It helps you identify and fix these issues to make your computer more secure.
Meet Our Team
Art Provost
VP of Security Services
Art joined Filament in 2011 and has been working in the Information Security arena for 30 years. He has held positions in operations, implementation, design and engineering, audit, and Information Security management in the U.S. Air Force, multiple Fortune 500 companies, and Information Security consulting companies.
He received his Certified Information Systems Security Professional (CISSP) from the International Information Systems Security Certification Consortium ( (ISC)2 ) – Certificate 49461; Global Information Assurance Certification (GIAC) GIAC Security Essentials (GSEC) – Certificate 37546; and a Certified Information Security Manager (CISM) from the Information Systems Audit and Control Association (ISACA) – Certificate 0405011.
Tyler Malcom
Security and Compliance Analyst
Tyler joined Filament in 2022 and has worked in various roles within the cyber field. He graduated with a degree in Psychology from Nebraska Wesleyan University in 2012 and joined the US Navy in 2015. Tyler completed the Joint Cyber Analysis Course (JCAC), the pipeline that all service members complete before continuing their careers in a cyber-related specialization. Following this he was assigned to Navy Information Operations Command Hawaii as part of a Cyber Protection Team, which focused on host and network defense as well as Blue Team exercises. He was then assigned to Navy Information Operations Command Georgia as part of a Combat Mission Team where he became a certified Exploitation Analyst focused on offensive computer network operations.
He received his Certified Information Systems Security Professional (CISSP) from the International Information Systems Security Certification Consortium ((ISC)2) – certificate 676613 – in November of 2022 and obtained his GIAC Security Essentials Certification (GSEC) in October of 2023.
Keri Kunkle
Security and Compliance Analyst
Keri joined Filament in 2023 and brings a wealth of experience to the cybersecurity landscape, having served in various pivotal roles within the field. After serving in the United States Marine Corps, she graduated with a Bachelor of Science in Information System Security from the American Military University in 2019. Keri embarked on a journey with the US Department of Defense at Camp Pendleton, California, as a Principal Cybersecurity Advisor and Information System Security Manager. Her leadership encompassed overseeing a team of 30 Cybersecurity Workforce members, ensuring robust security measures for an extensive user base of 30,000 individuals.
With a Master’s degree in Cybersecurity and Information Assurance from Western Governors University in 2021, Keri solidified her foundation in the realm of information security. Her expertise spans across NIST SP 800-53 compliance, controls identification, procedural documentation review, and audit testing — showcasing a dedicated commitment to cybersecurity initiatives.
Keri’s professional journey is enriched by certifications such as CompTIA Advanced Security Practitioner, EC-Council Certified Ethical Hacker, EC-Council Computer Hacking Forensic Investigator and CompTIA Security+, reflecting her comprehensive skill set and dedication to staying at the forefront of cybersecurity practices.
Let Us Help Enhance Your Data Security Posture
Interested in speaking with one of our experts? Let us know how we can reach you.