Services
01
Assess & Evaluate
Independent assessments and program evaluations that establish a clear, evidence-based view of current conditions, risk, and effectiveness.
02
Align
Security program development and alignment that connects governance, operations, technology, people, and organizational priorities.
03
Assure
Independent validation of controls, remediation, and program effectiveness to determine whether security is working as intended.
04
Advise
Independent counsel for leaders navigating security risk, investment, program maturity, and consequential business decisions.
Some need an independent assessment of a facility or specific security controls. Others need to understand whether policies and operations are aligned. Some need independent assurance that identified risks have been addressed. And others need a broader evaluation of how their security program works as a whole.
Blank Canvas meets organizations where they are.
Our services can be delivered individually, combined to address a specific challenge, or integrated into a comprehensive Security Program Evaluation. We work with clients to understand the question they are trying to answer, determine the appropriate scope, and apply the right combination of assessment, evaluation, assurance, governance, and advisory capabilities.
Clear the Canvas. Understand the Need. Build the Right Approach.
THE BLANK CANVAS PERSPECTIVE™
The Blank Canvas Perspective™ can be applied at different levels of an organization depending on the question that needs to be answered. The same disciplined approach can examine a single security control, a facility, a governance question, a remediation effort, or an entire security program.
01
Control
Examine whether a specific security control is appropriately designed and working as intended.
02
Facility
Assess physical security conditions, vulnerabilities, and operational effectiveness within a specific location.
03
Governance
Evaluate whether policies, standards, accountability, and operational practices are aligned.
04
Remediation
Independently validate whether identified risks and findings have been effectively addressed.
05
Security Program
Evaluate how governance, operations, technology, people, and physical security work together as a system.