Certification + Compliance Consulting

We can help you certify or conform to a multitude of information security or data privacy related requirements and/or standards.

It is highly recommended that you consider an Orange Parachute ISMS to manage one or more of these requirements under one sustainable Framework.  Rather than approaching any one of these independently as a silo, we will design your system so that changes are minimal as you continue to see an increase in regulatory requirements you must meet if you are to sustain your business growth and work in a variety of verticals.  Since there is no way around it, we encourage you to take the ISMS approach out of the gate and save yourself time, money and future headaches.

Click here to learn more about our Certification or Compliance Consulting Services.

Here are just some compliance requirements and standards that we've helped our clients navigate:
  • ISO 27001 / ISO 27002
  • ISO 27018 / ISO 29100
  • HIPAA
  • HITRUST
  • PCI-DSS
  • Cloud Controls Matrix (Cloud Security Alliance STAR)
  • Federal RMF / NIST
  • FedRAMP
  • FERPA
  • FIPS 140-2

Click here to see what our clients are saying about Orange Parachute

ISO Standards we have expertise with:
  • ISO/IEC 27000 — Information security management systems — Overview and vocabulary
  • ISO/IEC 27001 — Information technology - Security Techniques - Information security management systems — Requirements (you can certify to this)
  • ISO/IEC 27002 — Code of practice for information security management
  • ISO/IEC 27003 — Information security management system implementation guidance
  • ISO/IEC 27004 — Information security management — Measurement/Metrics
  • ISO/IEC 27005 — Information security risk management
  • ISO/IEC 27010 — Information security management for inter-sector and inter-organizational communications
  • ISO/IEC 27011 — Information security management guidelines for telecommunications organizations based on ISO/IEC 27002
  • ISO/IEC 27013 — Guideline on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1
  • ISO/IEC 27014 — Information security governance
  • ISO/IEC TR 27015 — Information security management guidelines for financial services
  • ISO/IEC 27017 — Code of practice for information security controls based on ISO/IEC 27002 for cloud services
  • ISO/IEC 27018 — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
  • ISO/IEC 27031 — Guidelines for information and communication technology readiness for business continuity
  • ISO/IEC 27032 — Guideline for cybersecurity
  • ISO 27799 — Information security management in health using ISO/IEC 27002. The purpose of ISO 27799 is to provide guidance to health organizations and other holders of personal health information on how to protect such information via implementation of ISO/IEC 27002.