Steering Committee Meetings

Having SecureState sit on your SSC gives a trusted, expert voice to security and an ability to communicate its importance to executives.

Many of the issues that SecureState uncovers as a security assessor are systemic problems requiring regular attention to fully address. Our Security Steering Committee offering is designed to provide clients with regular guidance around their information security program, and to keep security initiatives on track.


The Security Steering Committee provides a forum for stakeholders in the organization’s Security Program to discuss their current program state, bring new security issues to the table, and adjust program goals where necessary. For organizations unable to take advantage of a full Security Program Manager offering, the Security Steering Committee can provide some of the same security governance benefits.


SecureState has been assisting organizations of all sizes with governance of their security programs throughout its existence. The Security Steering Committee is a key component of a SPM engagement, in which SecureState serves as an organization’s outsourced Chief Information Security Officer (CISO).

Approach and Methodology

Security Steering Committee (SSC) meetings help key stakeholders understand the needs and priorities of security. This collaboration creates an environment of security enablement, where initiatives move more quickly and efficiently.

SecureState will facilitate a meeting with key stakeholders in your security program on a scheduled basis. Once a schedule for SSC meetings is established, SecureState will assist the SSC in identifying, prioritizing, and resolving information security issues that impact the organization. The SSC meetings will cover a recap of your organization's current state, ongoing projects, business objectives, and risk discussions.

With SecureState playing a role in the SSC, you receive trusted corporate level guidance on a variety of security topics. The SSC can review the corporate stance on Information Technology and update it as necessary to show that the organization is dedicated to maintaining their systems. Additionally, the SSC can identify and develop the correct policies & procedures needed for security governance and compliance auditing, as well as develop a multi-year plan for budgeting purposes. For example, SecureState can provide guidance on procedures for managing vendors, addressing vulnerabilities, maintaining compliance, or handling security incidents. SSC meetings also provide an open discussion where individuals or departments can raise concerns surrounding current information security issues. If remediation is necessary, goals, responsibilities, and milestones for addressing security issues will also be established.

Getting an outside perspective from SecureState security experts will help your organization design or build upon a managed security program. Ultimately, the goal is to create a cost effective strategy to protect systems and meet client’s expectations.

Get Started!