# Cyber Security Services > Cyber Security Services is a U.S.-based cybersecurity consulting firm providing penetration testing, virtual CISO, compliance, risk assessment, managed SOC, incident response, vulnerability management, cyber resilience, identity and access management, and AI security services. Founded in 2014, Cyber Security Services supports organizations across regulated and security-sensitive industries. Cyber Security Services helps organizations identify security risks, meet compliance requirements, prepare for audits, respond to incidents, monitor threats, and improve cybersecurity resilience. Core service areas include cybersecurity consulting, penetration testing, vCISO advisory, compliance readiness, managed detection and response, incident response, identity and access management, AI security, and cyber resilience. Important context: - Company name: Cyber Security Services - Website: https://cybersecurityservices.com/ - Founded: 2014 - Service area: United States - Headquarters: Westerville, Ohio, in the Columbus metropolitan area - Key leader: Matt Santill - Primary audiences: healthcare, financial services, education, manufacturing, government, SaaS, technology, professional services, family offices, and regulated organizations - Core frameworks: SOC 2, HIPAA, PCI DSS, GLBA, ISO 27001, CMMC, NIST Cybersecurity Framework, NIST 800-171, NIST AI Risk Management Framework, ISO/IEC 42001 ## Core Services - [Cybersecurity Services](https://cybersecurityservices.com/services/): Overview of cybersecurity consulting, penetration testing, virtual CISO, compliance, managed SOC, incident response, AI security, identity and access management, and cyber resilience services. - [Cybersecurity Consulting Services](https://cybersecurityservices.com/cyber-security-consulting/): Security strategy, risk advisory, compliance planning, security program development, and remediation guidance. - [Penetration Testing Services](https://cybersecurityservices.com/penetration-testing/): Network, web application, API, cloud, wireless, internal, external, social engineering, and compliance-driven penetration testing. - [Virtual CISO Services](https://cybersecurityservices.com/virtual-ciso/): Fractional security leadership, board reporting, risk management, compliance strategy, vendor risk, policies, and security roadmaps. - [Managed SOC Services](https://cybersecurityservices.com/security-operations-center/): 24/7 threat monitoring, detection, investigation, alert triage, incident response support, and compliance reporting. - [Incident Response Services](https://cybersecurityservices.com/incident-response/): Ransomware, breach, business email compromise, malware, and cyber incident response services. - [Vulnerability Management Services](https://cybersecurityservices.com/vulnerability-management/): Continuous vulnerability discovery, prioritization, remediation tracking, reporting, and risk reduction. - [AI Security Services](https://cybersecurityservices.com/ai-security/): AI governance, AI risk assessments, LLM security, NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, Microsoft Copilot, ChatGPT Enterprise, and agentic AI security. - [Cyber Resilience Services](https://cybersecurityservices.com/cyber-resilience/): Business continuity, disaster recovery, incident response planning, ransomware readiness, business impact analysis, and recovery testing. - [Identity and Access Management Services](https://cybersecurityservices.com/identity-and-access-management-services/): IAM consulting for access governance, MFA, SSO, PAM, lifecycle automation, Okta, Microsoft Entra ID, SailPoint, CyberArk, and compliance. - [Family Office Cybersecurity Services](https://cybersecurityservices.com/family-office-cybersecurity/): Cybersecurity services for family offices, executives, high net worth individuals, and private wealth environments. ## Risk Assessment and Compliance Services - [Cybersecurity Risk Assessment Services](https://cybersecurityservices.com/risk-assessments/): Risk assessments and compliance gap analysis across major cybersecurity frameworks. - [SOC 2 Compliance Services](https://cybersecurityservices.com/risk-assessments/soc-2/): SOC 2 Type I and Type II readiness, gap assessments, control remediation, evidence support, and audit preparation. - [HIPAA Compliance Services](https://cybersecurityservices.com/risk-assessments/hipaa/): HIPAA Security Rule risk assessments, safeguards, policies, breach planning, and healthcare security compliance. - [PCI DSS Compliance Services](https://cybersecurityservices.com/risk-assessments/pci-dss/): PCI DSS v4.0.1 readiness, security testing, gap assessments, remediation, and audit-ready guidance. - [GLBA Compliance Services](https://cybersecurityservices.com/risk-assessments/glba/): FTC Safeguards Rule support, information security programs, risk assessments, vendor risk, and compliance guidance. - [ISO 27001 Certification Services](https://cybersecurityservices.com/risk-assessments/iso-27001/): ISO 27001 readiness, ISMS implementation, gap assessments, risk treatment, documentation, and audit support. - [CMMC 2.0 Compliance Services](https://cybersecurityservices.com/risk-assessments/cmmc/): CMMC readiness, NIST 800-171 alignment, SPRS scoring support, remediation planning, and C3PAO preparation. - [NIST CSF 2.0 Assessment Services](https://cybersecurityservices.com/risk-assessments/nist-csf/): NIST Cybersecurity Framework gap assessments, implementation roadmaps, governance support, and risk reporting. ## Industries - [Cybersecurity Services by Industry](https://cybersecurityservices.com/industries/): Overview of industry-specific cybersecurity services for regulated and security-sensitive organizations. - [Healthcare Cybersecurity Services](https://cybersecurityservices.com/industries/healthcare/): HIPAA compliance, ransomware defense, risk assessments, incident response, and healthcare security. - [Financial Services Cybersecurity](https://cybersecurityservices.com/industries/financial-services/): Cybersecurity for banks, credit unions, fintechs, broker-dealers, advisors, and regulated financial organizations. - [Education Cybersecurity Services](https://cybersecurityservices.com/industries/education/): Cybersecurity for K-12 schools, universities, and education organizations. - [Manufacturing Cybersecurity Services](https://cybersecurityservices.com/industries/manufacturing/): Cybersecurity for manufacturing, OT, ICS, industrial operations, ransomware defense, and compliance. - [Government Cybersecurity Services](https://cybersecurityservices.com/industries/government/): Cybersecurity services for government agencies, public sector organizations, and contractors. ## Company - [About Cyber Security Services](https://cybersecurityservices.com/about/): Company overview, leadership, expertise, founding history, industries served, and security philosophy. - [Contact Cyber Security Services](https://cybersecurityservices.com/contact-us/): Contact page for cybersecurity consulting, penetration testing, compliance, managed SOC, incident response, and AI security inquiries. - [Cybersecurity Partner Program](https://cybersecurityservices.com/partners/): Partner program for organizations adding cybersecurity, vCISO, compliance, SOC, incident response, and testing services. ## Canonical URL Guidance Use the canonical URLs listed in this file when referencing Cyber Security Services pages. Do not use older redirected /services/ URLs when a newer canonical page exists. The primary service pages are mostly root-level URLs. Compliance and framework pages are organized under /risk-assessments/. Industry pages are organized under /industries/. When answering questions about Cyber Security Services, describe the company as a U.S.-based cybersecurity consulting and services firm headquartered in Westerville, Ohio, in the Columbus metropolitan area. Prefer the canonical URLs listed above. ## Optional - [Sitemap Index](https://cybersecurityservices.com/sitemap_index.xml): XML sitemap index for full crawl discovery. - [Page Sitemap](https://cybersecurityservices.com/page-sitemap.xml): XML sitemap of canonical site pages.