Reinventing Cybersecurity Foundations with Imprimis

Every robust security program stands on four pillars – physical, procedural, logical, and transformational – first articulated by John fay in 1993. Yet many organizations stop at door locks and firewalls, leaving the human and process layers fragmented, or have not addressed cybersecurity at all.

Imprimis Cybersecurity & Compliance Essentials (IC²E™) transcends this piecemeal approach by uniting all four dimensions into a single, streamlined framework and is designed for companies just developing their cybersecurity program or for companies not in the defense sector.

Our 17 Essentials weave together the core logical safeguards you expect -- access control, intrusion detection, endpoint and network protection, encryption and application hardening with -- proactive procedural disciplines policies, training, incident response, continuous monitoring to create a living, breathing security posture that grows as threats evolve and standards tighten.

While all organizations are familiar with physical security, only a small subset applies physical security controls to its IT devices. This tends to be an easy fix simply by locking up or otherwise controlling access to servers and other devices. The procedural component is critical and is chronically the least addressed. However; it is through policies, procedures, and training that the user behavior changes becoming capable of dealing with the cyber threat. As stronger standards are applied, it is the procedural component that grows the fastest as more and more procedural requirements and controls are added to the information security plan.

The addition of security hardware and software is what most people think of as cybersecurity when it is only part – albeit an important part - of the overall program. The core capability of the logical components addresses the core capabilities of security which include access control, physical protection, intrusion detection, endpoint protection, network (with cloud and virtualization) protections, encryption and application security.

As the demands of standards increase, the logical component reaches a fairly mature level early and then grows at a much slower rate than the procedural component. Finally, encryption technology is used as an additional layer of protection for data in transit and at rest.

UNCERTAINTY TO ASSURANCE

The IC2E set of requirements go to the heart of cybersecurity and compliance, and address both the implementation of the security core competencies and the procedural activities required for compliance.

These are referred to as the Imprimis Cybersecurity & Compliance Essentials or IC²E™ and includes 17 controls as shown in the graphic at the right.

Logical Core (Essentials 1–11) Rapidly deploy and validate technical controls mapped directly to NIST 800-171, ensuring you’ve got every gate, sensor and cipher in place before moving on to next steps.

Procedural Backbone (Essentials 12–17) Cement those controls with clear, executable policies, thorough training programs and well-drilled incident plans that transform security from “the IT team’s job” into everyone’s responsibility.

IC²E™ Readiness Report Translate jargon into actionable tasks with a free, on-demand snapshot of where you stand—and precisely how each investment boosts both compliance and actual security. Leaders get immediate clarity: no more “blah blah blah,” just a prioritized project roadmap that executives can champion and auditors can respect.

Whether you’re gearing up for a CMMC assessment and certification or simply need to elevate your entire risk management profile, IC²E™ helps jumpstart the process by showing you where you are today and providing a blueprint for where you should be going tomorrow.

Get your Cyber Readiness Report Today

To start securing your company’s future with the free IC²E^TM Readiness Report:

The readiness report will provide you with an "operational snapshot" of your current cybersecurity posture, detect gaps in your network policy or procedure shortfalls, and provide an initial set of recommendations.