In addition to providing compliance-related products, ComplianceForge also helps clients meet their specific business needs through direct professional services.
Implementation & Customization
Professional Services & Documentation Integration Partners
These partners have extensive experience implementing, tailoring, and integrating ComplianceForge products.
Services Offered
- Mergers, Acquisitions & Divestitures
- Consulting Services
- ComplianceForge Documentation Customization
Contact Information
Dark Rock Cybersecurity has extensive experience implementing and tailoring ComplianceForge products. Certified Practitioners, Architects and Assessors with the Secure Controls Framework (SCF).
Services Offered
- ComplianceForge Documentation Customization
- GRC Integration
- SCF Consulting
- Maturity Assessments
- Program Development
Contact Information
Steel Root is an IT Managed Services Provider (MSP) specializing in helping US Defense Industrial Base (DIB) companies implement and manage security requirements under DFARS, CMMC, and federal standards.
Services Offered
- ComplianceForge Documentation Customization
- NIST 800-171 / CMMC Gap Assessments
- Virtual / Fractional CISO Services
- GRC Integration
- Risk Assessments
Contact Information
principia/RAID specializes in comprehensive assessment and readiness services that cover a wide range of cybersecurity and compliance frameworks and industry standards, like CMMC, NIST, SOC 2, ISO, and more
Services Offered
- CMMC/NIST 800-171
- NIST 800-53/FedRAMP
- SOC1/SOC2
- ISO 27001
- SCRM
Contact Information
Operationalize Your Compliance Program
Governance, Risk & Compliance (GRC) Platforms
These GRC platforms integrate with the SCF and ComplianceForge documentation to operationalize your compliance program.
Cyturus turns the documentation organizations build with ComplianceForge into a Living Control Set - a single, continuously maintained environment where policies, standards, procedures, evidence, risks, and framework obligations all connect to the controls teams already operate. This makes compliance work reusable, measurable, and easier to keep current as requirements change.
Services Offered
- Maturity Management
- Control Tracking & Testing
- Vendor Management
- Enterprise-Grade GRC/IRM
Contact Information
Ignyte is a leader in collaborative security and integrated GRC solutions for global corporations. Used across Healthcare, Defense, and Technology industries. Operationalizes compliance using SCF controls.
Services Offered
- SCR Certification Support
- Information Assurance Program
- Audit Preparation
- Enterprise-Grade GRC
Contact Information
SCF Connect is a GRC platform built natively to support the SCF. Designed to integrate with ComplianceForge's SCRP (DSP) and CSOP products. Performs Secure, Compliant & Resilient Conformity Assessment Program (SCR CAP) assessments.
Services Offered
- Starting at $400/month for a GRC platform
- Native SCF Support
- SCR CAP Assessments
- Consultant & Auditor Portals
Contact Information
SimpleRisk is an GRC platform with deep, native SCF support, deployable on-premise or as a hosted service. SimpleRisk closes the loop from SCF control to actual risk treatment. And because SimpleRisk is open source at its core, teams can start free and scale into commercial support and hosting as they grow.
Services Offered
- Native SCF Integration
- On-Premise or Hosted
- Automated Control Import & Mapping
- Control Testing & Exceptions
- Control-to-Risk Mitigation
Contact Information
ZenGRC is a cloud-based GRC/IRM platform that utilizes the SCF. Enterprise-grade solution for compliance and risk management with efficient control tracking, testing, and enforcement.
Services Offered
- SCF Controls Available
- 6-8 Week Onboarding
- Vendor Management
- Audit Tracking
Contact Information
Security & Integrity Monitoring
Technology Solutions
Technology partners that provide tools for security monitoring, configuration management, and compliance automation.
The CimTrak Integrity Suite is a robust security, compliance, and integrity management tool offering real-time integrity monitoring, assessment, and remediation of critical IT assets. Capabilities include system hardening, configuration management, change management, change prevention, roll-back and remediation, allow-listing, file reputation, STIX/TAXII feeds, and a built-in ticketing system.
Services Offered
- NIST 800-53: 276 controls
- NIST 800-171 R3: 40 controls
- PCI DSS v4: 141 controls
- CIS v8: 43 controls
- FFIEC: 124 controls
- TSC (SOC2): 81 controls
Contact Information
Common Questions
Frequently Asked Questions (FAQs)
Here are answers to common questions about partnering with ComplianceForge: