360 Advanced is “Making Better Businesses” through their national Cybersecurity and Compliance offerings. Services provided include CSA STAR, SOC 1, SOC 2, SOC 3, SOC for Cybersecurity, HIPAA/HITECH, ISO 27001, PCI-DSS, HITRUST CSF, Microsoft SSPA Attestation, Penetration Testing, GDPR, CCPA and more. In certain states, 360 Advanced may operate under the name of Hiestand, Brand, Loughran, P.A. to meet AICPA requirements. To learn more about 360 Advanced, visit www.360advanced.com

For more information on compliance solutions, contact Brad Lyons at [email protected].

We guarantee full compliance with methodological and scientific international standards, and we strongly support *open source, open standards and interoperability protocols*.

The 4Science team of experts has gained decades of domain expertise and experience resulting from numerous universities and research institutes' collaborations. The team has the longest experience as DSpace supplier since 2003, and over 100 institutions served in Europe, Asia, America, Africa.

We are a Certified Partner for DSpace, a DSpace Steering Group member, the Leadership Group, and two DSpace Committers.

6clicks is a breakthrough Software-as-a-Service platform for compliance management and risk assessment. You can use 6clicks to automate risk assessment and compliance and fuel a culture of trust and transparency.

Accedere is a global provider of Assurance services for cybersecurity compliance. Accedere is a Colorado CPA firm registered with PCAOB with focus on Cloud Security and Privacy. Accedere helps clients in evaluating the much needed Cyber Governance Maturity as cyber risk is the 3rd biggest risk of doing business today.

Data Security and Privacy are increasing challenges in today’s cloud-based environments. Accedere provides the required expertise, customer experience for Cloud Security Assessments, Audits, Privacy Compliance. SOC1, SOC2, SOC3, reports are our major focus area. Accedere has audited multiple organizations both large and SMB in the cloud space for the past several years and has exceptional capabilities in this space. Accedere helps organizations achieve Level-2 and 3 STAR compliance.

The cloud assurance business is led by Ashwin Chaudhary who is an MBA, CPA and has certifications CCSK, CISSP, CISA, CISM, CRISC, CGEIT, ISO27001LA. For more details on how we can help please contact us [email protected], www.accedere.io.

Data Security and Privacy are increasing challenges in today’s cloud-based environments. Accedere provides the required expertise, customer experience for Cloud Security Assessments, Audits, Privacy Compliance. SOC1, SOC2, SOC3, reports are our major focus area. Accedere has audited multiple organizations both large and SMB in the cloud space for the past several years and has exceptional capabilities in this space. Accedere helps organizations achieve Level-2 and 3 STAR compliance.

The cloud assurance business is led by Ashwin Chaudhary who is an MBA, CPA and has certifications CCSK, CISSP, CISA, CISM, CRISC, CGEIT, ISO27001LA. For more details on how we can help please contact us [email protected], www.accedere.io.

Acronis sets the standard for cyber protection - solving safety, accessibility, privacy, authenticity, and security (SAPAS) challenges with innovative backup, security, disaster recovery, and enterprise file sync and share solutions that run in hybrid cloud environments: on-premises, in the cloud, or at the edge. Enhanced by AI technologies and blockchain-based data authentication, Acronis protects all data, in any environment, including physical, virtual, cloud, mobile workloads and applications.

Founded in Singapore in 2003 and incorporated in Switzerland in 2008, Acronis now has more than 1,500 employees in 33 locations in 18 countries. Its solutions are trusted by more than 5.5 million consumers and 500,000 businesses, including 100% of the Fortune 1000 companies. Acronis’ products are available through 50,000 partners and service providers in over 150 countries in more than 30 languages.

Actian is the leader in hybrid data management, cloud data warehouse, and data integration. Thousands of forward-thinking organizations around the globe trust Actian to help them solve the toughest data challenges to transform how they run their businesses. Visit http://www.actian.com.

Adallom is a SaaS security company founded in 2012 by alumni of the Israeli Intelligence Corps. We focus on evolving the way enterprises secure information in SaaS by monitoring all activity, detecting unauthorized access, and protecting users in real time. Adallom is the only SaaS security company to have defeated targeted SaaS attacks in the wild by applying advanced machine learning to real time user activity monitoring. We are members of Microsoft's MAPP (Microsoft Active Protections Program), and would love to work with you on securing your company's SaaS investment.

If you're curious about our name, "Adallom" is an abbreviation of the Hebrew saying “Ad Halom” which literally means “up to here” and in game theory lingo means “the last line of defense.” In the context of SaaS we believe that pre-existing defense mechanisms are ineffective at protecting information in SaaS. So we created a solution that extends the boundaries of enterprise security into the cloud. We moved control, visibility, and detection directly into SaaS, away from devices and perimeters. In the SaaS era, security can’t be bounded. Adallom’s charter is Security Without Boundaries.

Quest Consultants LLC DBA Aerstone is an NSA-Certified Vulnerability Assessor (NSA VAS) and Service-Disabled Veteran-Owned Small Business
(SDVOSB) that provides subject matter expertise in the field of advanced cybersecurity. Our products and services touch all aspects of cybersecurity, including standards-based assessment, penetration testing, engineering and mitigation, executive level advisory, architecture, systems
design, software development, and security training. Our commercial customers include small, medium, and large organizations in the financial services, healthcare, utility, aerospace, technology, and education spaces – as well as non-profit organizations. Our company also provides
exceptional support and cleared staff to a wide variety of federal organizations in the civilian, military, and intelligence community
sectors. As more of our customers move to the cloud, Aerstone is there to help them navigate important security concerns and compliance. More than
just a cybersecurity services vendor, Aerstone works to develop enduring relationships with clients, and helps build long-term value by fully understanding and supporting their business so that the strengthening of their security posture fully echoes and complements customer priorities and
mission.

AEVI* provides merchant-facing businesses – banks, acquirers, PSPs, ISOs, ISVs and others - with a platform that enables merchants to run their business smarter by giving them easy access to any payment technology and business solution for the best in-store customer experience. AEVI´s Platform for Smart Merchant Enablement empowers them to upgrade to more agile and data-driven propositions, driving greater efficiency, more innovation and an improved customer journey across all channels.

www.AEVI.com

A-LIGN is a technology-enabled security and compliance partner trusted by more than 2,500 global organizations to help mitigate cybersecurity risks. A-LIGN uniquely delivers a single-provider approach as a HITRUST CSF ssessor firm, Qualified Security Assessor Company, accredited ISO 27001, ISO 27701 and ISO 22301 Certification Body, accredited FedRAMP 3PAO and licensed CPA firm. Working with small businesses to global enterprises, A-LIGN experts and its proprietary compliance management platform, A-SCEND, are transforming the compliance experience enabling an anytime, anywhere approach to audits. For more information, visit www.A-LIGN.com.

The IT service provider Anexia is offering high-quality and individual cloud and managed hosting solutions as well as individual software and app development. Anexia is also running its own, independent data centers. Anexia has over 90 international server locations and is attending to over 100.000 active customers.

any.cloud was established in 1998 and since the beginning, our primary goal has been to help businesses flourish by delivering professional and innovative IT solutions. Our starting point was IT consulting services, but over the years, any.cloud has expanded its services to a wide range of cloud offerings.

Today, any.cloud delivers professional, ISO certified cloud services across the globe. With an innovative mindset, and a go-getter approach, any.cloud combines highly advanced technologies from IBM and Veeam and turns them into simple services delivered in price efficient as-a-Service models. Our cloud solution Business Protection Suite called ReVirt and the identity and detection intelligence service called ReTrust are both award-winning – making any.cloud’s services customer choice number one.

Making sure that we help our customers to work more efficiently and help their business grow securely are still our number one priority. We believe in working, until the solution is right for you, because for us, there is no ‘one size fits all’ – all our services and solutions come in scalable and flexible packages.

Let us be your trusted partner, and we will make it our goal to meet and exceed your expectations.

Appian delivers an enterprise platform for digital transformation that makes it easy for organizations to move fast and revolutionize the customer experience. Powered by industry leading Business Process Management (BPM) and Case Management capabilities, Appian’s low-code approach radically accelerates the time it takes to build and deploy powerful, modern applications, on-premises or in the cloud. The world’s most innovative organizations use Appian to revolutionize their customer experiences, transform their business operations, and master global risk and compliance. For more information, visit www.appian.com.

AppOmni delivers the industry leading SaaS security and management platform.

Atlassian unleashes the potential in every team. Our products help teams organize, discuss and complete shared work. Today Atlassian is the leading provider of collaboration software for teams at more than 110,000 companies globally, including top brands like Citigroup, eBay, Coca-Cola, Visa, BMW and NASA. We help teams at organizations of all sizes, from start-ups to large companies, and more than 75 percent of Fortune 100 companies are Atlassian customers. Visit CSA's STAR registry to access CAIQ self assessments of Atlassian cloud services including Bitbucket, Jira Align, Jira and Confluence Cloud, Opsgenie, Statuspage, and Trello. Please visit the Atlassian Trust Center for the latest information on the security, reliability, privacy, and compliance of our products and services: http://www.atlassian.com/trust

Atos SE (Societas Europaea) is a leader in digital services with 2014 pro forma annual revenue of circa € 11 billion and 93,000 employees in 72 countries. Serving a global client base, the Group provides Consulting & Systems Integration services, Managed Services & BPO, Cloud operations, Big Data & Cyber-security solutions, as well as transactional services through Worldline, the European leader in the payments and transactional services industry. With its deep technology expertise and industry knowledge, the Group works with clients across different business sectors: Defense, Financial Services, Health, Manufacturing, Media, Utilities, Public sector, Retail, Telecommunications, and Transportation.

Atos is focused on business technology that powers progress and helps organizations to create their firm of the future. The Group is the Worldwide Information Technology Partner for the Olympic & Paralympic Games and is listed on the Euronext Paris market. Atos operates under the brands Atos, Atos Consulting, Atos Worldgrid, Bull, Canopy, and Worldline.

Auth0 provides a platform to authenticate, authorize, and secure access for applications, devices, and users. Security and development teams rely on Auth0's simplicity, extensibility, and expertise to make identity work for everyone. Safeguarding more than 4.5 billion login transactions each month, Auth0 secures identities so innovators can innovate, and empowers global enterprises to deliver trusted, superior digital experiences to their customers around the world.

Avatier develops software and delivers services that automate IT operations. Our identity management and access governance solutions make organizations more secure and productive in the shortest time at the lowest costs. Avatier is the only company providing solutions that adapt to the needs of the business user delivering a unified framework for business processes across operations.

Avatier Corporation offers identity access management software, cyber security audit controls, and enterprise risk management services that transform how enterprises operate. Avatier identity management solutions combine business technology with innovation to augment and sustain an organization's risk management compliance through self-service administration and automation. From our unique user provisioning IT Store, to our first of its kind self-service password reset tool, and now with our newly released universal mobile client access certification software, Avatier delivers critical identity access governance capabilities to IT operations while lowering administration costs. Avatier offers a complete compliance management system with an ITIL service catalog, self-service provisioning, active directory group management, and self-service password reset to fortify your IT cyber security. For more information please visit https://www.avatier.com/

Avaya is a leading provider of solutions that enable customer and team engagement across multiple channels and devices for better customer experience, increased productivity and enhanced financial performance. Its world-class contact center and unified communications technologies and services are available in a wide variety of flexible on-premises and cloud deployment options that seamlessly integrate with non-Avaya applications. Avaya Breeze Platform™ enables third parties to create and customize business applications for competitive advantage. The Avaya fabric-based networking solutions help simplify and accelerate the deployment of business critical applications and services. For more information please visit www.avaya.com.

AVEVA creates industrial software used in engineering, operations and
performance of industrial assets in diverse sectors, across the world. We
have a track record of leading edge innovation, including IIoT, Cloud,
industrial AI, Digital Twin, predictive and prescriptive analytics, big
data and mixed, virtual and extended reality.

Axis Security’s Application Access Cloud introduces a new, simple, and secure solution for application access. Built on a zero-trust, agentless-first approach, Application Access Cloud enables more use cases, covering more apps than any other access solution. Axis eliminates the need for VPNs, VDI’s, network changes, or agents on every device. Reduce risk by significantly minimizing the attack surface as users never touch the network, or vulnerable applications. By collecting and analyzing real-time user behavior, Application Access Cloud continuously ensures the right users access the right apps making access fast to deploy, simple to use, and more secure than ever.

*Axon Enterprise, formerly known as TASER International, creates a
technological ecosystem that enables truth in public safety. Building on a
history of innovation in policing, our solutions rival the best of Silicon
Valley.*

*Customers are constantly gathering evidence in the form of body-worn
camera video, audio, photos, and other digital media. Axon Cloud Services
is delivered as software-as-a-service (SaaS) and offers an end-to-end cloud
application that provides customers with a centralized location to store,
categorize, manage, and share that data. *

Bayestree is an enterprise AI product company designed to dramatically alter effectiveness, speed and cost of enterprise customer support via its flagship product Sainapse. Sainapse is designed on the back of latest research and thinking in mathematics, data science and computing. It is omni-lingual, omni-channel, cognitive and sector agnostic. Sainapse use cases range from solving complex customer queries with sub-second latency, to preventing creation of duplicate records in customer master database. Sainapse beats enterprise class software requirements of scalability, extensibility, and security. In addition, Sainapse is natively compliant with GDPR requirements (PII handling).Conforming to CSA requirements and

Bay-Pac Systems (Pvt) Ltd is based on Chennai, India. It was started a by a small group of Human Resources professionals and Technocrats to provide a ready back-office facility to smaller organizations in the US so that they can take advantage of a ready made infrastructure, and have an office running literally overnite.

It came about because of a need in the market place where larger organizations with deep pockets and resources have taken advantage of low-cost, highly qualified labor pool in India by setting up footprints where most grunt work such as data-scrubbing, data conversions, call-centers and support are being run from. Smaller organizations have struggled to compete because of lack of resources needed to set up shop in a new country, and to manage peoples belonging to different cultures and value systems.

The founder, Reddy Chada is originally from India, but has spent 15 years in the US, both going to professional school and working in the west coast in large organizations implementing HRMS systems and providing global data integration solutions. With this unique perspective, he is able to tie the needs of the US clients with the delivery options available using local resources in India.

To this end, a highly successful operation delivering ready-made back-office services are available for small and medium organizations needing full-service or specific areas in Human Resources domain

Bell is Canada's largest communications company, providing consumers and business customers with wireless, TV, Internet, home phone and business communications services. Bell Media is Canada's premier multimedia company, with leading assets in television, radio, out of home and digital media. Bell is wholly owned by Montréal's BCE Inc. (TSX, NYSE: BCE). For more information, please visit http://Bell.ca.

BetterCloud is the first SaaS Operations Management platform, empowering IT and security teams to define, remediate, and enforce management and security policies for SaaS applications. Over 2,500 customers in 60+
countries rely on BetterCloud for continuous event monitoring, threat remediation, and fully-automated policy enforcement. To further guide customers on their SaaS strategy, the company established the first-ever "SaaS Application Management and Security Framework" in its newly published book, Controlling Your SaaS Environment. BetterCloud is headquartered in New York City with an engineering office in Atlanta, GA. For more information, please visit www.bettercloud.com.

BeyondTrust is the worldwide leader in Privileged Access Management (PAM), empowering organizations to secure and manage their entire universe of privileges. Our integrated products and platform offer the industry's most advanced

PAM solution, enabling organizations to quickly shrink their attack surface across traditional, cloud and hybrid environments.

The BeyondTrust Universal Privilege Management approach secures and protects privileges across passwords, endpoints, and access, giving organizations the visibility and control they need to reduce risk, achieve compliance, and boost operational performance. Our products enable the right level of privileges for just the time needed, creating a frictionless experience for users that enhances productivity.

With a heritage of innovation and a staunch commitment to customers, BeyondTrust solutions are easy to deploy, manage, and scale as businesses evolve. We are trusted by 20,000 customers, including 70 percent of the Fortune 500, and a global partner network. Learn more at www.beyondtrust.com.

Bitglass is a “cloud access security broker” and the leader in total data protection. Bitglass enables enterprises to adopt cloud-based applications without having to sacrifice the security of their data. The company's data protection suite delivers innovative technologies that transcend the network perimeter to deliver end-to-end data protection for the enterprise - in the cloud, on mobile devices and anywhere on the Internet. As industries like Healthcare and Finance begin adopting cloud apps, companies within them must comply with strict data protection regulations. Bitglass helps enterprises remain compliant while giving their enterprise IT teams the visibility and control they need and their employees the mobility and privacy they require. Bitglass was founded in 2013 by a team of industry veterans with a proven track record of innovation and execution. The company is based in Silicon Valley and backed by venture capital from NEA and Norwest.

BitSight Technologies is transforming how companies manage information security risk with objective, evidence-based security ratings. The company's Security Rating Platform continuously analyzes vast amounts of external data on security behaviors in order to help organizations manage third party risk, benchmark performance, and assess and negotiate cyber insurance premiums.For more information, please visit www.bitsighttech.com or follow us on Twitter (@BitSight).

Blackbaud is the world’s leading cloud software company powering social good. Serving the entire social good community—nonprofits, foundations, corporations, education institutions, and individual change agents—Blackbaud connects and empowers organizations to increase their impact through software, services, expertise, and data intelligence. The Blackbaud portfolio is tailored to the unique needs of vertical markets, with solutions for fundraising and relationship management, digital marketing, advocacy, accounting, payments, analytics, school management, grant management, corporate social responsibility, and volunteerism. Serving the industry for more than three decades, Blackbaud is headquartered in Charleston, South Carolina and has operations in the United States, Australia, Canada, Ireland, and the United Kingdom. For more information, visit www.blackbaud.com.

BluBracket is the first comprehensive security solution that makes code safe so developers can innovate and collaborate, and security teams can sleep at night. BluBracket gives companies and developers visibility into where source code introduces security risk while also enabling them to fully secure their code. Our target customers are companies who have code and software as a crucial part of their business.

For nearly four decades, Booz Allen has helped clients defend against cyber threats. As one of the largest cybersecurity firms in the world, our elite talent provides cyber defense, sophisticated tradecraft, and real-time cyber threat intelligence. Key activities include operational technology security, 5G, cloud security, IoT, Secure Connected Health, and weapon system security.

We solve the most consequential cyber challenges for clients at Fortune 500 and Global 2000 companies, and nearly every civil, defense, and intelligence agency. Teams of security researchers, penetration testers, reverse engineers, network analysts, and data scientists collaborate to help solve ever evolving challenges. Using expert tradecraft to combat the most advanced adversaries, we are often the first company to work on really challenging problems. Together, we help you keep your business and mission secure.

Resource Links

• Cybersecurity at Booz Allen
• Cloud Computing
• Cyber Threat Trends and Threat Landscape
• 4 Key Questions about Cloud Migrations, Answered
• Edge Computing Series
• Technology Events

C2 Labs serves as a security focused and agile digital transformation partner that blends Art and *Science *to enable our customers to expand their vision, drive cultural change, and avoid being left behind. Our engineers and products deliver proven results, bringing DevSecOps to Compliance.

CaixaBank is a financial group, leader within the Spanish market, comprising a banking and insurance business, as well as undertaking investments in international banks and in leading service sector companies. The Group's essence – and what sets it apart from others – is its level of implication and unswerving commitment to society. CaixaBank is committed to banking based on corporate values of quality, confidence and social commitment. CaixaBank has the largest customer base in Spain – 14 million people – and is the main bank for 1 in every 4 Spanish customers. The bank has the most extensive network in Spain, with over 5,000 branches and nearly 9,500 ATMs, complemented by a mobile and online banking service of the highest quality.

CaixaBank is also the tenth largest bank in the Eurozone in terms of market capitalisation.

Canford Brook Associates is a NCSC Certified Cyber Security Consultancy specialising in the architecture and design of secure cloud-hosted systems.We are experts in AWS and Azure public cloud platforms, and help you deliver robust and secure solutions that Identify, Protect, Detect, Respond, and Recover from cyber security threats.

CAS Assurance, LLC is a CPA firm based in Miramar, Florida, assisting corporate entities with their attestation, compliance, and cybersecurity governance needs. With services designed to meet the specific and unique needs of each client, our team of experienced and resourceful consultants provide better insights for better solutions and results. Our services are aimed at helping clients to improve operational efficiency, cybersecurity risks governance, accountability, data protection and privacy regulatory compliance posture to facilitate an overall healthy, secure, compliant, and thriving organization.

CAS Assurance, LLC cybersecurity and compliance related services include providing SOC 1 and 2 attestation, assisting clients with audit readiness assessment and remediation, including developing or enhancing requisite security policies and procedures for leading standards, frameworks and regulations such as NIST SP800-53, CSF, ISO 27001, ISO 27017, CCM, PCI-DSS, HIPAA, CMMC, and GDPR. Our services also include helping clients to establish a compliance management solution from our partner for continuous monitoring, maintenance, and maturation of organization cybersecurity and compliance efforts, moving compliance beyond the “checkbox”.

Cendyn is a cloud-based software and services provider that develops integrated technology platforms for driving sales and marketing performance in the travel and hospitality industry. The Cendyn Hospitality Cloud offers the most complete set of innovative software and services in the industry, covering hotel marketing, guest engagement, group sales, and event management. With offices in Boca Raton, Atlanta, Boston, San Diego, Toronto, Whistler, London and Singapore, Cendyn proudly serves more than 30,000 clients in 143 countries with enterprise spend levels in excess of $1 billion. For more information on Cendyn, visit www.cendyn.com.

Centrify is redefining the legacy approach to Privileged Access Management (PAM) by delivering cloud-ready Zero Trust Privilege to secure access to Infrastructure, DevOps, Cloud, Containers, Big Data, and other modern enterprise attack surfaces. As traditional network perimeters dissolve, organizations must discard the old model of “trust but verify”, which relied on well-defined boundaries. Zero Trust mandates a “never trust, always verify, enforce least privilege” approach to privileged access, from inside or outside the network. Centrify Zero Trust Privilege helps customers grant least privilege access based on verifying who is requesting access, the context of the request, and the risk of the access environment. By implementing least privilege access, Centrify minimizes the attack surface, improves audit and compliance visibility, and reduces risk, complexity, and costs for the modern, hybrid enterprise.

Organizations may consider approaching PAM by solely implementing password vaults, leaving gaps that can easily be exploited. Centrify Zero Trust Privilege combines password vaulting with brokering of identities, multi-factor authentication enforcement, and “just enough” privilege, all while securing remote access and monitoring of all privileged sessions.

Centrify’s industry-recognized solution redefines legacy PAM and goes beyond simple password vaulting to converge the core tenets of Zero Trust Privilege. Over half of the Fortune 100, the world’s largest financial institutions, intelligence agencies, and critical infrastructure companies, all trust Centrify to stop the leading cause of breaches – privileged credential abuse. For more information, please visit www.centrify.com.