Cybersecurity Programs

Build a security program that grows with your business. We design it with you on NIST CSF 2.0, run the protection behind it, and meet with you all year to keep it strong as threats and your business change.

  • Built on NIST CSF 2.0
  • Fractional CISO reviews
  • Statewide, with any IT setup
Give us a call
IT Hawaii security engineer reviewing a security dashboard with a business manager
Kauaʻi ChamberChamber of Commerce HawaiiMicrosoft
3CXSentinelOneAcronisScalePad

A cybersecurity program built for your Hawaii business

Your Hawaii business is growing, and so are the systems, data and vendors that attackers look for.

Every gap without a plan can leave you exposed to ransomware, fraud or a security questionnaire you can't answer.

Mark Gregory, founder of IT Hawaii, at his desk overlooking Honolulu

How do you build a security program that keeps up?

A cybersecurity program is the policies and protection a business uses to manage cyber risk, reviewed and improved over time.

We build yours on NIST CSF 2.0, the framework from the U.S. National Institute of Standards and Technology, with its six functions: Govern, Identify, Protect, Detect, Respond and Recover.

Where you stand: we learn your systems, data and vendors, and score your business on all six functions
Where you need to be: we set your target from your industry, the regulations you follow and your cyber insurance requirements
How you get there: a prioritized roadmap to close the gaps, plus the policies and procedures your business needs, such as information security, onboarding and offboarding, data classification, data retention and destruction, incident response and AI use

A fractional CISO for your business

A fractional CISO is a part-time chief information security officer: the person who leads your security program and keeps it current.

At IT Hawaii, Steve Massaro, our CEO, and a small group of our team fill that role. We review your program with you semi-annually, quarterly or monthly, depending on your plan. Every year we:

Update your assessment
Review your policies
Run an incident response tabletop exercise sized to your plan
Test a backup restore

When an insurer, client or vendor sends a security questionnaire, we help you answer it.

Happy with your current IT provider or in-house team? Keep them. Our fractional CISO works alongside them and gives you an independent view of your security.

Let's talk
Steve Massaro, CEO of IT Hawaii

The protection we run for you

Your program sets the plan, and we run these services every day to carry it out. For managed IT clients, a 24/7 SOC monitors SentinelOne on your devices.

data backup and recovery honolulu

Data Backups & Disaster Recovery

Servers fail, files vanish and accidents happen. We back up your data and build and test your recovery, so you can get back to work fast.
Read more
best endpoint detection and response

Endpoint Detection and Response (EDR)

Every laptop and device is a possible entry point for an attack. SentinelOne EDR, monitored by a 24/7 SOC, detects and contains threats fast and limits the damage before they spread.
Read more
best security awareness training

Security Awareness Training

Your staff is your business’s front line. Give them the skills to spot phishing emails, social engineering tricks and bad habits before they become big problems.
Read more
business email protection

Email Protection

Your inbox is a favorite entry point for cyberattacks. Get spam filtering, phishing defense and real-time scanning built in.
Read more
managed soc providers

Managed SOC

You don’t have time to watch for threats 24/7. Our managed SOC watches SentinelOne around the clock and acts fast when it finds a threat.
Read more

Ready to build your cybersecurity program?

Give us a call to talk through where your security stands today; we answer 90% of calls in 90 seconds or less.

Our cybersecurity services are available statewide to businesses with 10 or more employees, whether we run your IT or you keep your current IT team.

Talk to us!

Frequently asked questions

1
What is a cybersecurity program?

A cybersecurity program is the policies and protection a business uses to manage cyber risk, reviewed and improved over time. IT Hawaii builds cybersecurity programs on NIST CSF 2.0. We start by understanding your assets, their vulnerabilities and the threats that could exploit them. Then we put protection and detection in place, and build and test recovery processes.

3
Do you offer fractional CISO services in Hawaii?

Yes. IT Hawaii offers its cybersecurity services statewide, including fractional CISO services. Steve Massaro and a small group of IT Hawaii team members deliver them. We review your program with you semi-annually, quarterly or monthly, depending on your plan. Every year we update your assessment, review your policies, run an incident response tabletop exercise and test a backup restore.

5
Do you monitor our systems 24/7?

Yes. A 24/7 SOC monitors SentinelOne, IT Hawaii’s endpoint protection, on the devices we protect.

2
What is NIST CSF 2.0?

NIST CSF 2.0 is version 2.0 of the Cybersecurity Framework from the U.S. National Institute of Standards and Technology. It organizes security into six functions: Govern, Identify, Protect, Detect, Respond and Recover. IT Hawaii uses it to measure where your business stands, set where it needs to be and plan the steps between.

4
Can we keep our current IT provider?

Yes. Businesses that keep their current IT provider or in-house IT can work with IT Hawaii on their cybersecurity program and fractional CISO services. We work alongside your IT team and give you an independent view of your security.

6
How does a cybersecurity program help with compliance?

They work together. Cybersecurity is how you protect your systems, and compliance shows you meet the rules that apply to your business. IT Hawaii builds the security program first, then documents it so you can show regulators, clients and insurers what you do. We help with HIPAA, PCI DSS, SEC Regulation S-P and CMMC Level 1.