Decision Framework Systems, Inc

Decision Framework Systems, Inc was formed in January 2018 in recognition that tools and techniques for cybersecurity risk management and measurement are typically burdensome and viewed as a hindrance to risk management rather than an enabler. Its flagship product is FrameCyber®, a full service GRC platform that includes functions for cybersecurity risk assessment, event tracking, issue management, organization inventory, control inventory, risk registration, risk analysis, risk reporting, risk measures and metrics, and associated correlation of information and data in those domains required to perform cybersecurity risk management. FrameCyber® provides automation to ease compliance or comparison tasks with respect to industry, regulatory, or custom requirements. It allows issue and event collection in support of governance activities in an enterprise-wide risk management framework that includes mapping existing controls and metrics to specific risks to help senior management understand the value of cybersecurity management activities and support executive decisions with respect to cybersecurity risk. FrameCyber® includes functions to upload and download all aforementioned data types to facilitate enterprise integration with existing systems. Security features include enterprise, user, network, and device authentication, role and group-based entitlements, and field level auditing. Dr. Jennifer L Bayuk, CEO, has led cybersecurity risk management managers, staff, colleagues, and students for over two decades in a wide variety of positions, including CISO, Technology Risk Management, and Big 4 Information Systems Risk consulting and auditing. She has authored multiple textbooks and created curriculum at both the professional and graduate study levels. Dr. Bayuk has used the FrameCyber® framework in a variety of consulting and teaching endeavors and encourages a community rather than a proprietary approach to sharing knowledge of such tools and techniques.