Our Services

We are here to help

We have one mission: to make cyberspace a safe place to live, work, and raise a family. OPSG was founded to make a difference in the world and we will not stop until every organization, individual and business is operating in a secure manner, with all of their critical data and assets properly protected. That said, we are exclusive. We only keep 10 customers on retainer at any given time. This allows our dedicated team to focus on each customer, build rapport, deliver excellent customer service and lead you to have a strong security program you can build a team around.

Old Pueblo Security Group is focused on building out effective security roadmaps that actually work to protect an organization. The problem is that many organizations approach cybersecurity incorrectly. They try to prevent all attacks and be 100% secure which is impossible. When organizations focus on these unattainable goals, it can lead to solutions that don’t actually work. These solutions provide a false sense of security. The proper approach to security is to protect your critical assets and focus on timely detection while minimizing and controlling the damage. With over 15 years of collective cybersecurity expertise, there is no problem that we cannot solve with a creative cost-effective solution.

We know how overwhelming it can feel to try to protect your business from the dangers online. This is why we have been helping train and equip business and leaders in cybersecurity through world-class thought leadership.

You can reduce the risk of your business systems from being compromised and instead keep business operations running smoothly.

Protector

We have built our services into simple packages, and have created our Protector tier specifically to help even the smallest of organizations jumpstart (and manage) your compliance efforts so you can keep growing your business! The Protector package is meant to be compliance focused, meaning we are here to help you prepare for an upcoming audit, align with various security standards, or prove your adherence to a customer (or prospect’s) compliance demands. This package includes:

Security Roadmap

We won't just point out your problems and hit the road. We'll help you improve by creating a personalized strategy for executing your security projects in a way that manages your risks and aligns with your big-picture goals. Our team will build a comprehensive Cybersecurity road map that happily marries your security processes with your business goals. We'll also monitor your road map progress down the line to make sure all is well.

Meet with executive management

Understand your IT environment and security program to provide expert insight into industry leading practices

Conduct initial security assessment and high-level gap assessment to understand deficiencies and improvement areas

Establish a proposed program roadmap for security projects based on identified deficiencies

Maintain a deep understanding of your business model and objectives and provide insight as it relates to risk.

Security Assessment Questionnaire

We'll help you respond to your customers' security assessment questionnaires (SAQs) to prove your security and compliance readiness and support you in responding to queries.

Complete 1 Security Assessment Questionnaire.
Complete the SAQ and write answers to be reused in subsequent SAQ’s
Ensure policies, procedures, and controls are created or refined to expedite future assessments
Quickly remediate risk areas to score higher on the questionnaire
Affirm the questionnaire is completed in proper security "language".
Act as security liaison with prospective client/partner, advocating on the company’s behalf
Act as your CISO (which is oftentimes a requirement for the client/partner)

Resource Guidance

You'll learn about all the latest Cybersecurity resources, tools and technologies — and which ones will best complement your IT toolbox.

Provide resources around compliance efforts.

People, Process Technology

Our team will connect you with the hottest security policy templates around so you can lay out your company's guidelines for handling sensitive data.

Policy Templates
Customize controls and policies
Standard Operating Procedures
Technical SOPs

Facilitate Penetration Testing

Network Vulnerability Assessments External and basic web application scans

Report Cards

You'll feel like an A+ student when we provide you with weekly report cards on any progress or issues we encounter in your Cybersecurity posture.

Provide Weekly Report Card on Progress, Issues, etc.

Sentinal

Compliance is a necessary effort for just about every cloud organization, but compliance doesn’t equal security. Our Sentinel package is designed to bring you the cybersecurity experts & compliance advisors you need to build a robust security program that aligns with various compliance standards but that also appropriately addresses risk across your IT environment. This service also allows us to start monitoring your cloud assets, from your infrastructure environment and online assets to even your online business identity and dark web chatter!

Our Sentinel service includes everything listed above in our Protector tier, plus:

Compliance Framework

We'll update and align your security policies and controls with your desired compliance frameworks and transform your internal compliance structure to support these new processes.

Create and update policies and controls to align with desired compliance frameworks

Expert Guidance

Our security gurus will present their humble opinions on a wide range of security strategies, regulations and topics.

Provide expert opinions on diverse security topics, regulation, and strategy

Collaboration

We'll help your team work together to improve your security wording and marketing deliverables.

Security Content

We'll take a look at your existing security awareness content, make changes and create brand-new content for your team.

Risk Mitigation Tools

Get ready for tool time. We'll provide you with recommendations on how to enhance your Cybersecurity with tool integrations you can use to complement your existing architecture and data flows.

Security Management

Our team will prepare you to hold recurring meetings to discuss and implement security management.

Conduct recurring security team meetings with management
Weekly configuration monitoring
Digital footprint and risk monitoring
Monthly technical assessment of your cloud security posture, architecture, permissions and entitlements
Dedicated resource to support your sales cycle for all security/compliance inquiries and requests from prospects

Audit Assistance

We'll support you amid the dreaded security audit by suggesting the best auditing mechanisms for your organization.

Data Security: We'll take a good look at your encryption use, access controls and data security during transmission, storage and at rest.
Network Security: When we dig into your network security, we'll look at elements like network and security controls, monitoring capabilities, security operations center (SOC), and antivirus configurations.
Operational Security: Our operational security inspections include a review of your company's security controls, procedures and policies (oh my!).
Physical Security: We get physical with these security checks, where we'll check out elements like multifactor authentication, disk encryption, biometric data and role-based access controls.
System Security: Our team of Cybersecurity partitioners will review your system security by analyzing your patching processes, hardening processes and privileged account management.

Guardian

You can reap the benefits of our Guardian CISO advisory services at $10,000 a month. This vCiso as a service pricing plan is a great choice for companies already working to maintain and improve their security and compliance programs or looking to augment/manage their current teams.

With the Guardian model, our Cybersecurity team becomes an extension of your organization's capabilities, providing highly involved services with all prior features as well as:

Governance, Risk and Compliance (GRC)

We'll assist you in choosing, obtaining and implementing a dependable GRC solution.

We'll create and give you solid recommendations on the best risk mitigation tools for your company and even go the extra mile to implement them for you.
Vulnerability management program. (Scan, assess, triage, scan for remediation success).

Evidence Control

Preparing for an upcoming audit or ongoing compliance is easy as pie when we help you review and improve your audit evidence.

Security Program

Lead and direct security program enhancements and/or compliance initiatives including: defining scope and objectives, providing recommendations on configuration, and assigning tasks to delegates for implementation

Compliance Audit Support

Oversee annual compliance audits:

Coordinate compliance efforts
Represent your company with audit team
Facilitate evidence validation before and during audit fieldwork
Gap analysis & audit roadmap
Build policies, procedures, and controls
Assess overlap with other audits
Advocate client on any ‘audit pushback’
Oversee audit readiness
Acting as the liaison with auditors
Build future audit roadmap
Provide evidence in proper 'audit language'

Operations and Management

We can coordinate disaster recovery tests, incident response and business continuity operations annually.

Data Privacy Officer service
Transfer Impact Assessments/Business Impact Analysis services
Design and implementation of a public security page
Annual business continuity table-top exercise
External monthly vulnerability assessments (up to 10 targets)
Internal monthly vulnerability assessments (up to 4,000 targets)

Security Awareness and Training Program

Security Training Program - Employees (Managed KnowBe4 Training Services)
Custom Industry Based Training Development
Role Based Training
Annual information security training

Why a Monthly Subscription Instead of Hourly?

Budget with Confidence

Predictable cost, just like your employees.

Maximizing Results

We are performance driven and incentivized to work efficiently. If you aren't happy with the level of professional services, cancel anytime. We stand by our work.

Unlimited Assistance

We can provide continuous support (i.e. Slack & Email) without you having to pay for every question or request, it's part of the subscription you pay for (Guardian)

Just looking for a Cybersecurity Assessment? Or Audit Readiness Assessment; we have you covered, just give us a call.

Our Services

Contact