Grindstone PBC
Advocates for Cybersecurity Management

Against the backdrop of rapid digitization and a continually updated regulatory environment, tackling cybersecurity issues across public and private sectors is more important now than ever.

Yet, organizations often struggle to navigate cyberspace because of resource constraints, inadequate staff, and a lack of know-how for solving cybersecurity issues.

This is what cybersecurity expert and advocate Craig Philip discovered, while working on a large government project dealing with U.S. citizen data protection.

He quickly realized the need to bring more knowledgeable professionals into the fight against growing cyberattacks, and a need to infuse fresh ideas, innovative processes, and expert talent into cybersecurity management. From that, Grindstone Public Benefit Corporation (PBC) was born.

Today, Grindstone PBC provides cybersecurity products, training, and services which include cybersecurity staff augmentation. As a public benefit cybersecurity company, Grindstone PBC is driven to support and manage baseline and front-end cybersecurity compliance for government agencies and contracting companies, along with private industry including small, middle market and enterprise organizations.

“We have a business-driven risk-mitigation approach to solving cybersecurity compliance issues, along with an ability to identify and develop top cybersecurity talent,” says Philip, president at Grindstone PBC. Philip brings an exceptional combination of business acumen and technical expertise to the company. He has a background in economics and information assurance and is recognized as a Certified Information Systems Security Professional (CISSP) and Project Management Professional (PMP).

Similarly, Grindstone PBC director Shane Anderson holds a variety of critical cybersecurity certifications including an ISO 27001 certification which enables him to conduct cybersecurity audits. Grindstone PBC stands apart from its competition by adopting a people-oriented, proactive approach, and performance focus, grounded in its clients’ business goals. It customizes services without complications or expanded expense to suit client requirements and their business model by considering various industry-specific compliance frameworks and policies. This helps the Grindstone PBC team determine the ideal security controls, people, processes, and technology to be implemented.

To streamline cybersecurity compliance activities, the company utilizes machine learning and automation for increased operational efficiency.

Grindstone PBC has also developed a security compliance tool to automate time and labor-intensive tasks in cybersecurity management, allowing clients to do more with fewer resources.

Moreover, with a unique teach-first approach, Grindstone PBC helps clients better understand their issues from a business angle. This helps organizations align their cybersecurity management with their business operations and enables them to make smarter, and more informed business decisions on their cybersecurity measures.

We have a business-driven risk approach to solving cybersecurity compliance issues, along with an ability to identify and develop top cybersecurity talent

Case in point, Grindstone PBC recently identified over 200 vulnerabilities on a clients system during a security baseline service. Following a thorough analysis, Grindstone PBC can provide clarity to the client’s security baseline and create a tailored, holistic plan that enhances cybersecurity compliance, reduces cyberattack surfaces, and facilitates secure business operations. Cybersecurity services and compliance are the backbone of Grindstone PBC and its commitment to cybersecurity advocacy allows the company to educate and to introduce more professionals to the field. “We have an ecosystem of different innovative services that we leverage to train and develop the next generation of cybersecurity professionals,” added Anderson. Recently, Grindstone PBC introduced a volunteering initiative to provide real-world cybersecurity training for those interested in becoming certified cybersecurity professionals.

Looking ahead, Grindstone PBC is developing an immersive learning simulation program for future industry professionals and a cybersecurity apprenticeship program for veterans to build a robust cybersecurity talent pipeline. As the company continues to grow, Grindstone PBC aims to widen the spread of industry best practices via its cybersecurity risk management education and information sharing exercises. Grindstone PBC is fast becoming a cybersecurity leader, a destination for cybersecurity talent and an invaluable training resource for employers.