CCS Group Limited has added cybersecurity governance consulting to its services.

In a statement, the Bermudian-based company said this type of service is typically offered by specialty or accountancy firms., adding: “Although these firms conduct the security compliance audits for Bermuda businesses, they often don’t have the resources to help remediate the cybersecurity gaps illustrated by the audits.”

CCS said that businesses in Bermuda face stringent security regulations from local authorities and international regulators.

“In order to ensure that their security meet the regulatory requirements, businesses face regular compliance audits. CCS’s new security governance consulting service will use international standards and frameworks to guide clients in the application and optimal operation of their security protocols. This service will also help ensure that these clients are prepared for the cybersecurity portions of their compliance audits.”

Peter Aldrich, general manager of CCS, said: “We are delighted to be able to expand our services to include enterprise security governance. We feel strongly that this will increase the value CCS delivers to its customers. This is a logical addition to our enterprise security offerings and one that has been requested by a number of our clients.

“It has never been more clear that there is a need for meticulous security procedures and checks to help defend against cyberattacks in Bermuda.”

CCS said its cybersecurity governance consulting will not only facilitate businesses being well prepared for security compliance audits but will help any business validate that they have sufficient policies, procedures and security solutions in place to aid in safeguarding them from cyberattacks.

“With effective security strategies in place, businesses can mitigate risks of breaches, reputational damage and fines imposed by regulators,” said the company in its statement.

The consulting service will be led by CCS’s new Enterprise Security Consultant, Darren Mowat, who previously worked for the New Zealand government as an Information Security Consultant and Senior Systems Programmer.

He has experience working with complex IT structures, major IT projects, IT operations and business processes, focusing on security governance, risk and compliance, together with experience working with international security standards and frameworks.