At CEM, we have developed a Security Controls Integration Platform that normalizes control requirements from combined standards such as ISO 27000, NIST, and other regulatory frameworks, with continuous expansion to incorporate new regulations. 
This has been realised through a model-driven approach to Enterprise Security Architecture , in which an integrated data model—supported by its associated attributes—can be queried for applicable, in-scope security requirements for projects, perform gap analyses, and support compliance efforts. 
CEM has also modelled a catalogue of security reference architectures to guide the implementation of the necessary control mechanisms. By assessing a target architecture against the reference architecture, we can quickly identify gaps, create user stories for project requirements, and prioritize gaps based on risk scoring at the program level. The approach is primarily focused on fulfilling compliance and achieving certifications by providing a robust, end-to-end view of control coverage. It also enables rapid adaptation to change, automates analysis and documentation, reduces implementation and design costs, and delivers high-assurance, verifiable security insights from a single, maintainable source.

Cyber Enterprise Modelling

Org chart

Teams

Offices