Security Metrics QSA staff, PEN Testing and ASV staff are always willing to provide 1st hand guidance when they deem the situation to be necessary. In a sense, Security Metrics seems to adopt our cyber-sec environment as their environment and as such, engages our staff with their cultural perspective that their standard's for QA are standards that we must take to heart in the same manner as they do within their own organization - simply stated they take "ownership" of their client's welfare - a very rare quality to find in today's private sector culture. Review collected by and hosted on G2.com.
I personally wish the virtual threat analyses were available more often. These virtual sessions are highly instructive and provide a 1st hand sense of the risk associated with most APTs today. The high-level threat analyses that we get from our 3rd party Intel resources are good, but the Security Metrics virtual threat analyses take many of the APT threats and tend to put a very fine point on many of these international threats and how they are expanding their scope of activity. Review collected by and hosted on G2.com.