The Bridgham Standard
Nine reasons a regulated firm keeps its security with one firm. Each is a commitment the Client can hold us to, in writing.
Will the firm be known, or started over every year?
Our advisors get to know the systems, the people, and the history, to be prepared for any security matter at any time.
Step four of the Program is a study of the Client's firm, its exposure, and the systems behind it. The same named advisor carries that study forward into the watch and the record.
Who do we call?
Any question or incident goes to a dedicated client advisor.
One address, one reply, within one business day. Incident coordination begins within two hours, at any hour, through the client incident line.
Who answers for each finding?
A specific name from a specific desk on each finding, policy, and recommendation.
Our advisors are employees of the firm. Findings are checked before they are signed, and the name on the page is the name a board can call.
Can the controls be proven to be in place?
Where each control is supposed to be, with evidence that it is.
The Program writes the policies and operating documents and keeps a crosswalk to the frameworks the Client is asked about. When an auditor or a board member asks, the record is already there.
What happens before the letter arrives?
Controls in place, tested, written down, and tracked at all times, with evidence accessible at any time.
Continuous monitoring and alerts, a written incident response plan, and a short tabletop against it. Compliance mapping and policy upkeep run all year, rather than at renewal.
How long will a questionnaire hold up the deal?
Any form, inquiry, or diligence matter, answered with evidence.
Insurance questionnaires and customer questionnaires are answered by us, with evidence, in five business days. Security closes deals instead of stalling them.
Can this be read at a board table?
Know how, know why, in terms of risk and value: written for boards and audits.
Weekly briefs and quarterly board reviews. Every policy says why, and every report can be read at a board table without translation.
Is this advice, or a sales call?
Our employees are rewarded for the firm's success, putting client satisfaction over revenue.
The Attack Surface Analysis and the Protection Guide carry no cost and no obligation. Our advisors are employees who are paid to be right rather than to sell.
What does this cost before anything is signed?
Know the plan, at no cost and with no obligation.
Five hour-long calls turn the analysis into a prioritized plan of what to address and when. The Client sees the full survey and plan before deciding anything.
Start the conversation
Connect with a Bridgham advisor on how the Standard would apply to the firm.
The nine, in full
Long-term stewards
Our advisors get to know the systems, the people, and the history, to be prepared for any security matter at any time.
One name
Any question or incident goes to a dedicated client advisor.
Responsible and accountable
A specific name from a specific desk on each finding, policy, and recommendation.
Checked
Where each control is supposed to be, with evidence that it is.
Planned ahead
Controls in place, tested, written down, and tracked at all times, with evidence accessible at any time.
Five days
Any form, inquiry, or diligence matter, answered with evidence.
Oversight-ready
Know how, know why, in terms of risk and value: written for boards and audits.
Service over sales
Our employees are rewarded for the firm's success, putting client satisfaction over revenue.
Clear
Know the plan, at no cost and with no obligation.