Your firm's governance posture. Maintained — not repaired.

Cyber Watch is active posture management. Your firm knows where it stands before a DFS examination, insurance renewal, or incident forces the question.

PRICE: From $1,189/month

Start with a Gap Assessment

A governance program built once and left alone is not a governance program. It is a time stamp.

Regulatory frameworks change. Your vendor relationships change. Your technology environment changes. The personnel who signed off on your incident response plan may have left the firm.

A governance program that was examination-ready 18 months ago may not be examination-ready today — and the only way to know is to maintain it continuously, not audit it annually.

Cyber Watch is that continuous maintenance layer. It keeps your governance evidence current, your documentation organized, and your firm’s posture actively managed — so that when the examination cycle arrives, the evidence is already there.

Ongoing governance management. Not a monitoring tool.

Cyber Watch is not a security operations center. It is not an alert dashboard. It is an active governance management program — IT On Demand maintaining your firm’s examination-ready posture on a continuous basis.
That means your policies stay current. Your vendor risk assessments are refreshed when relationships change. Your penetration test findings have documented remediation evidence. Your incident response plan reflects your actual environment and has been tested.
When the examination arrives, none of this needs to be created. It already exists.

What Cyber Watch maintains.

    1. Ongoing policy review and update — Governance policies reviewed and updated as regulations evolve and your firm’s environment changes. You are not filing last year’s program.
    2. Vendor risk program maintenance — Third-party inventory kept current as vendors are added, changed, or removed. Risk tiering updated. Documentation current.
    3. Penetration test coordination and remediation documentation — Annual third-party penetration test coordinated and managed. Remediation evidence documented for all high and critical findings.
    4. Incident response plan maintenance and testing — IR plan kept current and tested annually through a documented tabletop exercise — producing the proof of testing that 23NYCRR500 explicitly requires.
    5. MFA verification and documentation — Periodic verification that MFA coverage is complete and documented across all user populations, cloud infrastructure, and privileged accounts.
    6. Regulatory update monitoring — DFS, SEC, and ERISA guidance monitored. Program updated when regulatory requirements change. You are not discovering a new requirement at the examination.

Is Cyber Watch the right fit?

IT IS FOR:

  • Firms that have completed a foundational governance build and need ongoing maintenance rather than a one-time project
  • Firms approaching a DFS examination cycle who need to verify that their documentation is current and examination-ready
  • Firms renewing cyber insurance that requires demonstrated evidence of active governance controls
  • CCOs managing a compliance program who want year-round assurance rather than annual scramble
IT IS NOT FOR:
  • Firms that do not yet have a documented governance foundation in place (start with Cyber Liability Essentials)
  • Firms with complex, multi-framework regulatory exposure requiring full governance ownership (see Cyber Liability Manager)

Questions about Cyber Watch.

  • Q: How is Cyber Watch different from Cyber Liability Essentials?
  • A: Cyber Liability Essentials builds the governance foundation. Cyber Watch maintains it. If Essentials is the build phase, Cyber Watch is the ongoing program that keeps the evidence current. Many firms begin with Essentials and transition to Cyber Watch once the foundation is in place.
  • Q: How often does IT On Demand review and update our program?
  • A: Frequency of specific activities — policy reviews, vendor assessments, penetration tests, IR plan testing — is defined in your engagement scope based on your regulatory requirements and firm size. At minimum, the program reflects your current environment at all times. You are not relying on a document that was current when it was written and has not been touched since.
  • Q: What happens if there is a regulatory change that affects our program?
  • A: Monitoring regulatory developments — DFS guidance, SEC rulemaking, ERISA DOL updates — is part of the Cyber Watch program. When a change affects your program requirements, we update the program. You do not need to monitor the regulatory environment independently to maintain your posture.
  • Q: Can Cyber Watch support a DFS examination?
  • A: Yes. Cyber Watch is specifically designed so that when a DFS examination arrives — with 30 days' notice and a documentation request list — your evidence is already assembled and current. We can also provide advisory support through the examination process as needed.

Start with the Assessment.

The Compliance Gap Assessment tells you exactly where your governance program stands today and what level of ongoing support is appropriate for your firm’s exposure. 30 minutes. No obligation.

Schedule Your Assessment

30 minutes. No obligation. Specific to your firm’s regulatory environment.