Distrust and caution are the parents of security … Benjamin Franklin
Citadel Information Group, based in Los Angeles, CA, provides information security management services to the business and the not-for-profit community.
Founded in 2002 by Stan Stahl, Ph.D., and Kimberly Pease, CISSP, our mission is to deliver Information Peace of Mind ® to our clients.
We provide CISO-for-Rent, Virtual-CISO, and other information security management services. We combine subject matter expertise, management proficiency, and, above all, skill in helping an organization make taking proper care of its sensitive and critical information a part of its culture.
- Chief Information Security Officer (CISO) Management
- Board & C-Suite Governance
- Security Management of the IT Network
- Secure Application Development
- Security Education and Culture
- Incident Response and Business Continuity (IR/BCP)
- Information Security Management Reviews and Assessments
- Technical Vulnerability Reviews and Assessments
Citadel’s commitment to excellence has been documented time after time. Our people are exceptionally talented. We are creative problem-solvers. We play well with others. And client-service is our absolute number one priority.
Dr.Stahl talks about Citadel Information Group: From the boardroom to the firewall.
Understanding the Unique Challenges of Middle-Market Organizations
We have extensive middle-market operations and consulting experience so we know what works and, more importantly, what doesn’t. Citadel principals have served as Chief Operating Officer and as Chief Information Officer. Other Citadel Senior Staff have also had executive experience. This means we understand the management constraints and “mind-sets” that can challenge getting information security “just right.” Our security management recommendations are tailor-made to fit a client’s business model so that the organization can meet its information security responsibilities within its budgetary constraints, its own unique culture, and its other business realities.
Information Security Best Practices
Our clients benefit from our extensive experience interpreting and advising our clients on industry standards such as the NIST Cybersecurity Framework, ISO 27001/27002, HIPAA, GLB, and the Payment Card Industry Data Security Standard. Clients also benefit from the information security expertise Citadel principals developed securing teleconferencing at the White House, databases inside Cheyenne Mountain and the communications network controlling our nuclear weapons arsenal. And, of course, staff have attained globally recognized information security certifications including the Certified Information Systems Security Professional (CISSP) designation.
Full Service
We don’t stop at assessments. We have the capability and capacity to assist clients implement information security policies, provide awareness training to staff, and, more generally, design and implement action-focused information security improvement programs designed to cost-effectively bring their information security practices in-line with their needs. If it has to do with information security management, we do it. Period.
Community Leadership
We believe in giving back to the information security community. We also believe our clients benefit from our extensive involvement in the information security community. It helps us stay sharp and cutting-edge. That’s why Citadel principals—along with other Senior Staff—are active in the information security community, why we give information security talks and lectures, and why we regularly publish papers on information security, with attorneys and other cross-disciplinary colleagues. It’s why Dr. Stahl, our co-founder and President, founded the nonprofit SecureTheVillage when most people his age are contemplating retirement.
Keynotes and Communication
Citadel principals offer engaging presentations on meeting the challenges of cyber security. We are knowledgeable, articulate, high-energy speakers with the rare gift of being able to describe the complexities of information systems security in a way that makes sense to real-world non-technical business professionals.
- Boards of Directors
- Business and Professional Executives
- Professional, Civic and Philanthropic Associations
- Other security organizations