Re: Security Assessment Vendor

[Patricia Malek <pamalek () LOYOLA EDU>]

Rapid 7 and Security Metrics.  Security Metrics does a lot of PCI-related work with HigherEd but they also do threat 
assessments outside of PCI.

Patricia Malek, CISSP, GSEC
Director of CyberSecurity
Technology Services
[Description: Description: Description: cid:3336388681_2393357]
pamalek () loyola edu<mailto:pamalek () loyola edu>

www.loyola.edu/informationsecurity<http://www.loyola.edu/informationsecurity>

Security Alert: Loyola Technology Services will never ask for your password.  Please do not share it with others.


From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Bumpas, Shana
Sent: Tuesday, April 17, 2018 10:20 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Security Assessment Vendor

Good Morning,

I am looking for a vendor to do a threat assessment of our environment.   Mandiant is the first vendor that comes to 
mind.  Does anyone have experience with Mandiant and if so, how was it?  Are there any other contenders worth a look?  
Thank you.

Best regards,
Shana Bumpas
Director of Information Security
University of Richmond
804-289-8655
sbumpas () richmond edu<mailto:sbumpas () richmond edu>