Risk Assessments and Compliance
Annual risk assessments and gap analyses mapped to NYDFS Part 500, SEC Regulation S-P, and NIST CSF 2.0. Clear findings your board, CCO, and examiners can act on.
New York · Launching 2027
IsabelCopley helps investment advisers, broker-dealers, and funds meet NYDFS and SEC expectations with practical risk assessments, real-world penetration testing, and security leadership on demand.
Services
Annual risk assessments and gap analyses mapped to NYDFS Part 500, SEC Regulation S-P, and NIST CSF 2.0. Clear findings your board, CCO, and examiners can act on.
Hands-on testing of your network, Active Directory, and external attack surface, run under signed rules of engagement, with prioritized remediation guidance.
Fractional security leadership for firms that need a CISO function without a full-time hire: policies, vendor risk, incident readiness, and due diligence questionnaires.
Approach
Attackers and auditors look at your firm differently. We bring both views: the offensive skills to find what an adversary would exploit, and the governance discipline to turn that into a program that holds up under examination.
About
IsabelCopley was founded by a security practitioner whose career spans U.S. Navy nuclear weapons security, federal counterterrorism work, and infrastructure for mission-critical public safety systems in CJIS-compliant environments.
That background shapes how we work: methodical, discreet, and focused on what actually reduces risk.
Contact
For inquiries, partnerships, or to be notified when engagements open, reach out by email.
alex@isabelcopley.com