Leadership
Fractional CISO
A named security leader for your board, customers and auditors, without a full-time executive hire. We own the security program, the roadmap and the customer security questionnaires.
Security and compliance advisory
Security leadership, on demand
Rock Fortress gives growing organizations an experienced security leader and the hands-on help to back it up, from SOC 2, HIPAA and HITRUST readiness to cloud security and day-to-day IT operations.
Services
What we do
Engagements are scoped to what you need: a standing security leader, a push to your first audit, or a team that runs the work alongside yours.
Compliance
Compliance readiness
Scoping, controls, policies and evidence for SOC 2, HIPAA and HITRUST, so your audit runs on schedule and the program holds up after it.
Operations
Security and IT operations
Hands-on administration, hardening and monitoring, carried out in your environment with your tools, so the controls on paper are the controls in production.
Cloud
Cloud security
Identity, access and configuration reviews across Microsoft 365, Azure and AWS, built on least privilege and documented so they stand up to an audit.
Approach
How we work
01
Inside your environment
We work in your tenant using the tools you provide. Your data stays where it belongs, and access ends cleanly when the engagement does.
02
Audit-defensible by default
Every control, access decision and exception is documented so an auditor or a customer can follow the reasoning.
03
Transparent recommendations
When we recommend a compliance platform or tool, we tell you about any partner relationship we have with it, up front.
About
Led by Eric Klenner
Rock Fortress is led by Eric Klenner, a security leader who runs security and IT governance programs under HIPAA, HITRUST and SOC 2. Clients get a senior practitioner who is accountable for the outcome, not a hand-off to a junior team.
- CISSP
- CISM
- GIAC GMON
- CompTIA Security+
- Microsoft AZ-500
Contact
Let's talk about your security program
Tell us where you are and what's coming up, whether that's an audit, a customer questionnaire or a gap you already know about.
eric@rockfortressconsulting.com