Company type | Private |
---|---|
Founder | Peter Stewart, Jim Stickley |
Headquarters | Baton Rouge, Louisiana , United States |
Key people | Paul McCown, CEO |
Products | TraceCSO, TraceInsight |
Website | https://www.tracesecurity.com/ |
TraceSecurity is a cybersecurity company that provides cloud-based IT governance, risk, and compliance management solutions[ buzzword ] for organizations. [1] [2]
Peter Stewart and Jim Stickley founded TraceSecurity in 2003. The firm is based in Baton Rouge, Louisiana, United States, with executive offices in Los Gatos, California. [3] [4] [5] Paul McCown is CEO. [6]
TraceSecurity was founded in 2003 by Peter Stewart and Jim Stickley. Stickley wrote The Truth About Identity Theft and created a series of informative videos to help protect the public from various types of fraud and security exploits. [1] [7]
In October 2012, TraceSecurity launched TraceCSO, a cloud-based software system. [8] [9] Lake Trust Credit Union was an early adopter of TraceCSO who used the software system to track remediation processes and assure that the financial institution was in line with risk-compliance responsibilities. [10] The purpose of the software was to streamline compliance regulations and policy adherence for organizations. [8] TraceCSO provided a single point of aggregation for risk and compliance management as well as process management to provide a more comprehensive view of risk and compliance across all IT systems. [11] The software focuses on centralizing and integrating key functional areas including, risk management, auditing, governance and compliance reporting as well as specific areas of policy, process, training, vendor, and vulnerability management. [5] TraceCSO uses wizards where possible to assist users of any skill level through setup and usage. [12] The initial setup process guides the user through the set up of departments, roles, users, network scanning, and authority documents. [12] Once setup is complete, the software system performs a holistic risk assessment to identify assets and threats. [12]
TraceSecurity partnered with Qualys in 2013 to integrate products and create a cloud-based GRC package. [13] The company also launched a phishing simulator in 2013. The simulator allowed organizations to evaluate the effectiveness of existing information and security policies, determine how well employees adhere to internet security procedures when presented with a phishing email, assess the level of security awareness among employees, and identify areas for remediation. [2] The phishing simulator was listed as product of the week on April 1, 2013 on Network World . [2]
In 2014, TraceSecurity entered a joint product agreement with GFI Software. GFI Software is one of the world’s largest providers of IT solutions[ buzzword ] for small to mid-sized businesses. [4] The same year TraceSecurity partnered with Rackspace, a cloud hosting provider. [14] The partnership was designed to increase exposure of TraceCSO to Rackspace users. [14] In October 2018, TraceSecurity released a new anti-phishing product called PhinPoint [15] In December 2018, TraceSecurity was named 2018 Cybersecurity Provider of the Year by US Business News. [16]
TraceSecurity is headquartered in Baton Rouge, Louisiana and has executive offices in Los Gatos, California. In 2018, the company employed approximately 85 people and served over 2,500 customers in fields spanning from financial services, health care, government and other regulated sectors. [3] [17] TraceSecurity's core market consists of organizations with assets in the range of $100 million to $1 billion. [18]
TraceSecurity launched a channel partner program in 2013 to help value added resellers (VARs), managed security service providers (MSSPs), and consultants build their security and IT governance, risk and compliance services aimed at small and midsized businesses. [19] The partner program has five partner levels to support various levels of participation and benefits: referral partner, reseller partner, value-added reseller, consulting partner and technology partner. [19] TraceSecurity had partners across the United States in 2013. [19]
SAP SE is a German multinational software company based in Walldorf, Baden-Württemberg. It develops enterprise software to manage business operations and customer relations. The company is the world's leading enterprise resource planning (ERP) software vendor. Apart from ERP software, the company also sells database software and technology, cloud-engineered systems, and other ERP software products, such as human capital management (HCM) software, customer relationship management (CRM) software, enterprise performance management (EPM) software, product lifecycle management (PLM) software, supplier relationship management (SRM) software, supply chain management (SCM) software, business technology platform (BTP) software and programming environment SAP AppGyver for business.
Trend Micro Inc. is an American-Japanese cyber security software company. The company has globally dispersed R&D in 16 locations across every continent excluding Antarctica. The company develops enterprise security software for servers, containers, & cloud computing environments, networks, and end points. Its cloud and virtualization security products provide automated security for customers of VMware, Amazon AWS, Microsoft Azure, and Google Cloud Platform.
Check Point is an American-Israeli multinational provider of software and combined hardware and software products for IT security, including network security, endpoint security, cloud security, mobile security, data security and security management.
Galvanize is a privately owned software as a service (SaaS) company founded and headquartered in Vancouver, British Columbia, Canada. The Company builds security, risk management, compliance and audit software for the governance, risk management, and compliance (GRC) market.
Ivanti is an IT software company headquartered in South Jordan, Utah, United States. It produces software for IT Security, IT Service Management, IT Asset Management, Unified Endpoint Management, Identity Management and supply chain management. It was formed in January 2017 with the merger of LANDESK and HEAT Software, and later acquired Cherwell Software. The company became more widely known after several major security incidents related to the VPN hardware it sells.
Governance, risk management and compliance (GRC) is the term covering an organization's approach across these three practices: governance, risk management, and compliance.
Webroot Inc. is an American privately-held cybersecurity software company that provides Internet security for consumers and businesses. The company was founded in Boulder, Colorado, US, and is now headquartered in Broomfield, Colorado, and has US operations in San Mateo and San Diego, and globally in Australia, Austria, Ireland, Japan and the United Kingdom.
Opengear is a global computer network technology company headquartered in Edison, New Jersey, U.S., with engineering in Brisbane, Qld, Australia and production in Sandy, UT.
GlobalSign is a certificate authority and a provider of internet identity and security products. As of January 2015, Globalsign was the 4th largest certificate authority in the world, according to Netcraft.
In computing, managed security services (MSS) are network security services that have been outsourced to a service provider. A company providing such a service is a managed security service provider (MSSP) The roots of MSSPs are in the Internet Service Providers (ISPs) in the mid to late 1990s. Initially, ISP(s) would sell customers a firewall appliance, as customer premises equipment (CPE), and for an additional fee would manage the customer-owned firewall over a dial-up connection.
GlobalScape, Inc. (AMEX:GSB) is a software developer headquartered in San Antonio, Texas, United States.
Tufin is a security policy management company specializing in the automation of security policy changes across hybrid platforms and security and compliance. The Tufin Orchestration Suite supports next-generation firewalls, network layer firewalls, routers, network switches, load balancers, web proxies, private and public cloud platforms and micro-services.
Computhink is the developer of the document management, enterprise content management, records management, and document workflow software Contentverse and its cloud version, Contentverse Cloud.
Lifeboat Distribution is an international value-added distributor. Their customers are vendors who specialize in virtualization/cloud computing, security, application and network infrastructure, business continuity/disaster recovery, database infrastructure and management, application lifecycle management, science/engineering, and other technical products.
Code42 is an American cybersecurity software company based in Minneapolis specializing in insider risk management. It is the maker of the cloud-native data protection product Incydr and security microlearning product Instructor. Code42's Incydr is a SaaS data-loss protection product. Incydr is designed to help enterprise security teams detect insider risks to data that could lead to data leak and data loss and insider threat breaches, and respond to them appropriately. Code42's Instructor is an integrated microlearning tool that allows security teams to send out security training videos to teach employees how to manage risk.
Cloud Security Alliance (CSA) is a not-for-profit organization with the mission to “promote the use of best practices for providing security assurance within cloud computing, and to provide education on the uses of cloud computing to help secure all other forms of computing.”
Lockpath is a governance, risk management, and compliance and information security software platform based in Overland Park, Kansas. Its Keylight platform integrates business processes to simplify risk management and regulatory compliance challenges. Common business areas Lockpath target are policy and procedure management, risk assessment, incident management, vulnerability management, vendor management, business continuity planning and internal audit preparation.
Netwrix is a Frisco, Texas-based private IT security software company that develops software to help companies identify and secure sensitive data and assist with compliance auditing. After eight acquisitions the company's team geographically expanded to Latin America, UK, Germany, France, Asia, USA as well as other countries. The company's flagship products are Netwrix Auditor and StealthAUDIT that help information security and governance professionals manage sensitive, regulated and business-critical data.
Workiva, Inc. is a global software-as-a-service (SaaS) company. It provides a cloud-based connected and reporting compliance platform that enables the use of connected data and automation of reporting across finance, accounting, risk, and compliance.
Third-party management is the process whereby companies monitor and manage interactions with all external parties with which it has a relationship. This may include both contractual and non-contractual parties. Third-party management is conducted primarily for the purpose of assessing the ongoing behavior, performance and risk that each third-party relationship represents to a company. Areas of monitoring include supplier and vendor information management, corporate and social responsibility compliance, Supplier Risk Management, IT vendor risk, anti-bribery/anti-corruption (ABAC) compliance, information security (infosec) compliance, performance measurement, and contract risk management. The importance of third-party management was elevated in 2013 when the US Office of the Comptroller of the Currency stipulated that all regulated banks must manage the risk of all their third parties.