Yastis | Cybersecurity Consulting

top of page

Frequency wave.png

Cyber Risk Assessments, Enhancements, SOC 2 Prep,

and More

Need stronger business cybersecurity?
Click below to schedule a free 30-min meeting.

Referral Program

Frequency wave.png

Cyber Risk Assessments, Enhancements, SOC 2 Prep,

and More

Need stronger business cybersecurity?
Click below to schedule a free 30-min meeting.

Assessments

Cybersecurity assessments list

Enhancements

Cybersecurity enhancements list

Michael Andrewes, CGEIT, CISSP, PMP

Michael is the Yastis Founder and Lead Cybersecurity Consultant. He has 20 years of cybersecurity, IT, and telecom experience in the US DoD and as an entrepreneur. He founded Yastis to help small and medium-sized tech-enabled businesses minimize cyber risks and stay compliant.

For more info:

About

About

Michael Andrewes, CGEIT, CISSP, PMP

Michael is the Yastis Founder and Lead Cybersecurity Consultant. He has 20 years of cybersecurity, IT, and telecom experience in the US DoD and as an entrepreneur. He founded Yastis to help small and medium-sized tech-enabled businesses minimize cyber risks and stay compliant.

For more info:

Frequently Asked Questions (FAQs)

How do you ensure confidentiality and security of our data?

We sign NDAs, have strict policies and procedures, use industry-standard encryption, and train consultants on data handling.

What qualifications do your consultants have?

Our consultants have extensive experience and qualifications, including certifications such as CISSP, Sec+, and others.

Do you work with clients long-term or only short-term projects?

We provide support long-term or on a per-project basis, tailored to meet client requirements, even as they change over time.

Can you describe your typical process for completing projects?

We analyze the client's environment, conduct a risk assessment and gap analyses, then develop a plan to enhance security controls.

Does Yastis do all of the work once we get started?

Most projects require regular coordination between the consultant and your team.

How long does a typical project take to complete once we start?

Timelines vary based on the project's scope and complexity. A detailed project plan and timeline will be provided before we get started.

What will our team members need to do as part of the process?

Answer questions, provide documentation, and pull up security settings for review.

How often will we receive updates on the project's progress?

We provide regular updates, including weekly status reports and ad-hoc updates, and schedule regular meetings.

Will you provide ongoing support after the project is completed?

Yes, we offer ongoing support and monitoring, including periodic assessments, testing and incident response support.

Will we need to do certain tasks on a recurring basis?

Yes, it's best to automate as much of it as possible and set calendar reminders for the manual tasks.

What kind of documentation and deliverables will we receive?

We provide a report with findings, recommendations, and documentation and such as policies, plans, and procedures.

How often should our cybersecurity be re-assessed?

In most cases, annually, or whenever you have made any major system configuration changes.

Assessments

Cybersecurity Services

Enhancements

Cybersecurity Services

Yastis staffing graphic

Yastis training programs graphic

Yastis management reporting graphic

Yastis system monitoring graphic

Yastis technical controls graphic

Yastis documentation graphic

Enhancements

Yastis custom graphic

PCI DSS graphic

NIST RMF graphic

NIST CSF graphic

CIS 18 graphic

Assessments

Yastis why graphic

Referral Program

Contact Us

bottom of page