Certified cyber risk expert specializing in early to mid-stage health tech, medical device, digital health, and cybersecurity industries. Board advisory and consulting services delivering comprehensive expertise on the implementation and development of cyber risk strategy, programs, and initiatives.

British Assessment Bureau is one of the UK's most popular certification bodies, providing a wide range of certification services for more than 20 years. Through the use of a "no hidden fees" policy, plain language communications and a pragmatic approach to auditing, BAB is well regarded for the service it provides to its clients. This attention to detail and a determination to provide a first-class service to its clients is why it has achieved, and retains, its Platinum Partner status with independent reviews service, Feefo. As a UKAS-accredited certification body, BAB takes its status seriously and ensures clients are provided with a robust assessment process, not just a tick-box exercise, while providing useful guidance through its reports and backing that up with access to a range of training services that can help to increase awareness of both standards and the auditing process, in general. Being part of the Amtivo group, which has physical offices in the US, UK, Ireland, Italy, Norway, China and Japan, means clients with multiple international offices can be supported by a business with global expertise, but with local team members who understand the local markets.

Founded as a member of BrightMarbles Holding group from Rotterdam, Netherlands. UN1QUELY is a software development and cybersecurity services company that builds quality and secure software products and provides cybersecurity services from defensive, offensive and managerial aspects driven by senior talent, strong culture and empowering passion. UN1QUELY uses innovative technology and tools, with security, privacy and a cloud-first approach.

ETHOS (n): A technology partner defined by purpose-driven innovation and unwavering integrity. Ethos delivers exceptional, secure solutions that not only solve complex challenges but also create lasting, meaningful impact through service.

Facient is a fractional consulting firm that provides on-demand implementation services to help founders navigate the challenges of growth and scale. Our customized solutions empower startups and small businesses to build capacity, drive revenue, and solve business challenges without the cost or commitment of a full-time hire. We mobilize the expertise of diverse, world-class operators building today’s most successful companies such as Meta, GE, and Calendly to supercharge small business growth and uplift underserved communities. Our core offerings include: • Operations Strategy & Execution • Sales Enablement • Business Development • Fractional Leadership

We firmly believe that the only place you can start is right where you are. For many of our clients, that can be an intimidating jumping-off point, but that is what we are here for. Our expertise in compliance and security will take you where you need to go.

Securis360 is a boutique cybersecurity firm based in Pittsburgh, PA focusing on data privacy compliance and governance such as ISO 27001, ISO42001, SOC2, HIPAA, GDPR and HITRUST. We have a large offshore team with the senior management having prior experience in large global consulting firms and provide top quality deliverables and round the clock support. We have worked with over a 100 clients in 10 countries and helped them with their audits across all major frameworks. We also have a technical team for pentest and appsec services as well as provide continuous Pentesting as a Service.

Core Compliance provides management consulting services for organizations: • pursuing certification/accreditation to ISO and other standards • implementing information and communications technology controls • optimizing and integrating compliance programs with business systems and processes Our consultants are experienced working with companies of all sizes in the following industries: Pharmaceuticals, Cannabis/Marijuana HEMP, Food Safety, Dietary Supplements, Medical Device, Aerospace, Information Service & Security, Automotive, Environmental, Electronics Recycling, Laboratories, Health & Safety

Cylpha is a North American cyber firm and our team brings cyber experience from • US Department of Defense • Global Military and Intelligence Agencies • Technology Consulting Firms • Big 4 Consulting Firms • CyAlpha’s growing team delivered numerous cyber engagements to various clients around the globe • Our team boasts an average of 13+ years of cybersecurity experience and an average of 21+ years of IT experience per resource • Pentest, vCISO/ vDPO Services and ISO / SOC2 Security & Privacy Consulting are our core service offerings. • Cyber Compliance / Consulting - We helped more than 200 start-up’s / midsize companies with VCISO / vDPO, cyber and privacy consulting services to prepare them for SOC2 and ISO certifications and broader compliance certifications such as CCPA, CMMC, HIPPA and GDPR • Pentests - We delivered more than 700 pen tests (from large enterprise clients to mid-size clients to start-ups) to support SOC2 and ISO certification and also to improve cyber hygiene • Our clients are located throughout the United States, Canada, Middle East and Europe, with new clients partnering with us monthly

At 21st Century Cybersecurity, we are dedicated to ensuring your privacy and data security remain uncompromised. Founded to protect businesses and individuals against the proliferation of cybercrime and data harvesting, we provide comprehensive cybersecurity services to safeguard your information from hacks, attacks, ransomware, and data theft.

Finland Tech is a Chicago-based managed service provider (MSP) that helps small and mid-sized businesses achieve and maintain compliance without slowing down their operations. We bridge the gap between security advice and security action: where many firms tell you what your framework requires, we implement and manage the controls behind it. As an MSP, we own the technical foundation compliance depends on—identity and access management, Microsoft 365 hardening, endpoint protection, backup and recovery, and security monitoring. That means we satisfy the majority of what SOC 2, HIPAA, and NIST-aligned programs require as part of how we already run your environment, not as a separate project bolted on top. Through our partnership with Thoropass, we pair hands-on technical execution with a streamlined audit and evidence platform. Clients get a single team that designs the controls, deploys them, collects the evidence, and carries the program through audit—cutting the back-and-forth, duplicated tooling, and finger-pointing that come with multi-vendor compliance efforts. We take a practical, risk-reducing approach. Rather than chasing every checkbox, we focus on the controls that meaningfully lower exposure and hold up to scrutiny, then automate and document them so compliance becomes repeatable instead of a yearly scramble. What sets us apart is operational depth. Our team is in the weeds daily—building automations, running migrations, and managing real production environments—so the controls we put in place are built to work, not just to pass. For SMBs that want compliance handled end to end by the same people keeping their IT running, Finland Tech is that partner.