Cyber360X

BACKGROUND

Introduce your business and what you do there.

I’m the cybersecurity manager at a procurement and spend management platform that helps businesses streamline purchasing, control expenses, and improve visibility across vendor and payment workflows.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Cyber360X?

We needed help achieving audit readiness and compliance across key frameworks, including ISO 27001 and SOC 2, while strengthening our overall security posture and internal controls.

SOLUTION

What was the scope of their involvement?

Cyber360X manages the end-to-end compliance and security scope for the project. This includes gap assessments against ISO 27001 and SOC 2 requirements, risk assessments, and the development and implementation of security policies and procedures. They also support control implementation within the PurchasePlus platform, review technical and organizational measures, coordinate evidence collection, and prepare us for audit readiness, including pre-audit reviews and remediation guidance.

In terms of deliverables, Cyber360X has provided a comprehensive set of compliance and security materials, including ISO 27001 and SOC 2 gap assessment reports, risk assessment and risk treatment documentation, and a full suite of security, privacy, and operational policies. They’ve also provided audit readiness and evidence mapping documents, control implementation guidance, remediation trackers, and pre-audit review materials to support a smooth certification and audit process.

What is the team composition?

We work with 2–5 teammates from Cyber360X.

How did you come to work with Cyber360X?

We found them through an online search and a referral. We chose them over other options because they had high ratings, were close to our geographic location, had pricing that fit our budget, had a great culture fit, offered good value for the cost, and had company values that aligned with ours.

How much have you invested with them?

So far, we’ve spent between $10,000 and $49,000 with them.

What is the status of this engagement?

We started working together in June 2025, and the engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Our engagement with Cyber360X has resulted in clear, measurable progress for Marketboomer. We’ve achieved audit readiness for ISO 27001 and SOC 2, closed identified control gaps, and significantly improved documentation quality and evidence consistency across the PurchasePlus platform. As a result, our security posture has been strengthened, internal processes have become more structured, and we’re well prepared for external audits with minimal remediation required.

For example, with Cyber360X’s support, we’ve closed the majority of identified compliance gaps from the initial assessment, implemented all required high-risk controls, and reduced audit preparation time significantly by centralizing evidence and documentation. We’ve also completed internal risk assessments and control testing cycles ahead of schedule, which has positioned us to enter external audits with minimal findings and no major control deficiencies. So far, we’ve closed around 85%–90% of the identified compliance gaps before the audit phase, and our audit preparation time has been reduced by roughly 40%–50% compared to previous compliance efforts due to better documentation, centralized evidence, and clearer control ownership.

How did Cyber360X perform from a project management standpoint?

Cyber360X’s project management is well structured and highly reliable. They follow clear timelines, communicate milestones effectively, and deliver all key deliverables on time. Any dependencies or risks are flagged early, which helps keep the project on track without delays.

In terms of communication, we use virtual meetings and emails or messaging apps.

What did you find most impressive about them?

What stands out most about Cyber360X is their practical, business-aligned approach to compliance. They don’t just focus on passing audits — they ensure controls are realistic, scalable, and well integrated into our actual workflows and the PurchasePlus platform. Their depth of expertise, proactive guidance, and ability to anticipate audit concerns make them a true partner rather than just a compliance vendor.

Are there any areas they could improve?

Overall, the experience has been very positive. If anything, earlier involvement during some initial internal planning stages could have accelerated a few decisions on control ownership. However, Cyber360X has adapted quickly and provided clear guidance once engaged. Beyond that, there have been no major areas for improvement, and the project has been executed smoothly.

BACKGROUND

Introduce your business and what you do there.

I’m the cybersecurity manager of Retrocausal, an AI-powered software company that enhances the productivity, quality, and safety of manufacturing operations by assisting assembly operators and managers with advanced guidance and automation.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Cyber360X?

We needed help with our ISO 27001 and GDPR compliance.

SOLUTION

What was the scope of their involvement?

Cyber360X delivered end-to-end cybersecurity and compliance services focused on strengthening our organization's security posture and achieving regulatory readiness. The project included SOC2 and ISO/IEC 27001 control implementation and tracking, development and alignment of security policies and procedures, and continuous compliance monitoring.
Cyber360X also managed endpoint security by onboarding and enforcing controls through MDM, conducted vulnerability identification and remediation using EDR tooling, and coordinated annual penetration testing to validate security effectiveness. In parallel, the team supported audit engagement activities by preparing evidence, closing control gaps, and working closely with stakeholders to ensure timely progress.

What is the team composition?

We worked with 2–5 teammates from Cyber360X.

How did you come to work with Cyber360X?

We found them through an online search. We chose Cyber360X because of their strong expertise in ISO 27001 and GDPR compliance, combined with a practical, business-focused approach that aligned well with our security and regulatory requirements. Compared to other providers, Cyber360X demonstrated deeper hands-on experience, faster execution, and clear guidance tailored to our AWS-based environment, making them the best fit for us.

How much have you invested with them?

We spent a confidential amount.

What is the status of this engagement?

We worked together from September 2025–January 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Our project with Cyber360X resulted in clear, measurable outcomes, including successful ISO/IEC 27001 certification, strengthened GDPR compliance, and the implementation of structured security controls across our AWS environment. We also achieved improved audit readiness, reduced compliance gaps, and faster responses to customer security questionnaires, demonstrating tangible progress and success.
Through our engagement with Cyber360X, we closed the majority of identified ISO27001, SOC2, and GDPR compliance gaps, reduced audit findings to zero major and only minor observations, and significantly improved audit readiness. We also reduced the time spent on security questionnaires and compliance evidence collection by over 40–50%, enabling faster customer onboarding and more efficient security operations.

How did Cyber360X perform from a project management standpoint?

They were absolutely professional throughout the project. We mainly communicated through virtual meetings, emails, and messaging apps.

What did you find most impressive about them?

Cyber360X's hands-on, highly practical approach and deep understanding of both security controls and real-world business constraints were impressive.

Are there any areas they could improve?

No, we were very satisfied.