Image for Vendor - Tevora 23-02


Tevora is a global leader in enterprise cybersecurity, risk, and compliance services. 

Founded in 2003, Tevora’s team of expert consultants is devoted to supporting the CISO in protecting their organizations from digital threats, creating more secure and compliant business operations. With 20 years of consistent growth, Tevora has accumulated numerous awards and recognitions for growth and industry leadership. Most notably, Tevora has been recognized as one of Inc 5000’s fastest growing companies for 8 years since 2014. 

Today, Tevora boasts over 1000 enterprise clients and robust practices around compliance, risk, threat management, and cyber solution integration.

Tevora: Go forward. We’ve got your back.

On the Request for Quote, Purchase Order, and all vendor communication, reference contract number: WSIPC RFP 23-02.

Tevora: Go forward. We’ve got your back.

Your first line of defense starts here. Tevora is a specialized management consultancy focused on cyber security, risk, and compliance services. Our combination of collaborative strategic planning and skillful execution make us a trusted partner to some of the most famous brands in the world.

Tevora offers a full range of services designed to meet the changing needs of your enterprise.

Tevora Datasheet (PDF) >>


  • Uniform Audit Platform
  • SOC1, SOC2, SOC2+
  • SOX (IT GCCs)
  • ISO 27001, 27017, 27018
  • HIPAA Security Rule, HIPAA Privacy Rule BCDR, BIA, ISO 22301
  • FedRamp
  • CMMC
  • NERC/FERC Compliance
  • ISS
  • Policy & Procedure Development

ERM & Third Party 

  • ERM Program Development 
  • Enterprise Risk Assessment 
  • Governance Strategy & Roadmap 
  • Third Party Program Buildout 
  • Third Party Managed Service 
  • CISO as a Service (vCISO)


  • Privacy Impact Analysis
  • Privacy Program Development
  • GDPR, CPRA Attestation
  • ISO 27701
  • Privacy Run Books (DSAR)
  • Data Privacy Officer (DPO) Hours


    • Red/Purple Team Exercises 
    • Network, Web, Mobile, API Pen Testing 
    • Vulnerability Assessment
    • Phishing/Spear-phishing
    • Secure Code Training

    Incident Response

    • Emergency Response 
    • Compromise Assessment 
    • Readiness Assessment 
    • Tabletop Exercises 
    • vSOC


    • Control Assessment
    • Cloud Security
    • Compromise Assessment 
    • Ongoing Operations Review 
    • Identity & Access Management 
    • Privileged Account Management 
    • Security Solution Deployment 
    • Security Tool Selection 
    • Automation and Orchestration

    On the Request for Quote, Purchase Order, and all vendor communication, reference contract number: WSIPC RFP 23-02.

    Claudia Fellini
    Tevora - Bid Manager

    Vendor Inquiry Form

    Do not remove or rename this field as it is used to display the vendor's information in form response emails