Churchill & Harriman

History

Ken Peterson
Founder and CEO
Churchill & Harriman

Churchill & Harriman (C&H) was founded in 1986 by Ken Peterson as a strategic IT staffing firm. Our value proposition then was to take every measure to ensure a "win – win" resultant outcome between a prospective employer and a prospective employee. Our demonstrated success led to the establishment of a multitude of relationships with outstanding organizations and individuals.

Beginning in 1991, C&H was invited to perform consulting services for our satisfied customers. Since 1997, a broad range of clients, including Fortune 500 corporations, industry governing bodies and industry-wide associations, have engaged C&H to employ our methodology-based risk management solutions. We take our commitments to our customers very seriously, and we have earned a reputation for exceeding our client’s expectations, for execution, and for keeping our commitments to our clients as a trusted partner and advisor.

Today we are privileged to serve many of the world's most respected organizations and practitioners developing and implementing enterprise-wide risk management solutions and supply chain risk management solutions. C&H helps clients select and implement controls and processes that identify, measure, and manage business risk. We ask all of our clients a critical question: "how are you measured?" Then we seek to do all that is rightfully possible to contribute to the achievement of our client’s performance objectives through the discharge of our duties.

Certain risk management results C&H has contributed to are known at the highest levels of the U.S. Federal Government to be best practices. Additionally, C&H has been entrusted to help protect and enable firms whose infrastructure has been formally designated as "Critical Infrastructure" by the U.S. Federal Government. C&H is an active leader in the international standards community, and earned the distinction of being the first approved ISO 27001 and BS 25999 Associate Consultancy by BSI Americas [The British Standards Institute]. Additionally, Churchill & Harriman is an Assessment Firm member of the BITS Shared Assessments Program. We speak on behalf of The Financial Services Roundtable to raise Program awareness, and contribute to the Program’s Working Group and AUP Technical Development Committees. C&H was an original Leadership Team Member of the PhRMA-sponsored SAFE-BioPharma Association, helped operationalize the SAFE System, and C&H consults to the Association and its Members.

Churchill & Harriman and its employees are privileged to serve and contribute to several charities, including The Earth Institute, The Fallen Heroes Fund, Plan U.S.A., and UNICEF.

Case Studies

Compliance Consulting for a Fortune 20 Financial Services Company

Our client's objective was to become certified to ISO 27001 within their Global IT Infrastructure function. They turned to Churchill & Harriman. While consulting our client through the achievement process of certification to ISO 27001, C&H helped the organization harmonize two of five global IT processes into one, crossing departmental boundaries. In addition to resultant cost savings and process efficiencies, our work enabled our client to successfully address a Federal regulatory finding.... read more > >

Global Risk Assessments for a BPO

A publicly traded Business Process Outsourcing Service Provider (BPO) needed to meet security and privacy contractual requirements on a $1B contract with a new customer. Churchill & Harriman was chosen to develop risk (security, privacy, and compliance) criteria upon which our client's vendors were subsequently assessed. Employing the new risk criteria, C&H then conducted several onsite risk assessments on the BPO's vendors located around the globe, enabling the BPO to meet the security and privacy requirements their customer had of them.... read more > >

Vendor Management Program Optimization

A major global financial services corporation that provides custody and asset servicing wanted to improve their internal and external risk posture. Churchill & Harriman was engaged for a series of projects. Existing vendor risk assessment criteria were mapped to ISO 27001/2 and BITS Shared Assessments Program elements, thus ensuring our client's compliance with FFIEC guidelines and industry best practices. A new classification system for vendors was established that simplified and reduced the cost to both our client and their vendors. Additionally, a new approach to conducting information security and compliance assessments of the vendor base was developed, resulting in further and significant cost savings for both our client and its vendors.... read more > >

Business Continuity Plan Development for a Global Life Sciences Company

The largest division of a Fortune 50 client engaged Churchill & Harriman to develop and successfully test a comprehensive Business Continuity Plan for them. In addition to delivering the new BC Plan, C&H provided recommendations for improvement in planning, process and Plan execution, leveraging industry best practices including BS 25999. Our recommendations were subsequently provided to our client's Corporate Governance function so that they could be leveraged across their global enterprise.... read more > >

Information Security Services for a Global Life Science Corporation

To improve their risk posture, a Fortune 50 client determined to rigorously assess their global information security policies and practices. Churchill & Harriman was enlisted to conduct an ISO 27001-based Gap Analysis. C&H's work revealed numerous opportunities for our client to optimize cost, controls, and processes within their global information security function.... read more > >

Enterprise Privacy Program Strategy and Implementation for an International Pharmaceutical Corporation

Churchill & Harriman's ongoing contributions have better positioned this Fortune 50 client to meet its global privacy compliance requirements, including Safe Harbor for all of its U.S.-based companies. C&H provides recommendations to our client on addressing the dynamic global landscape of privacy challenges, providing analysis and input on their Enterprise Privacy Program. C&H works in conjunction with other Compliance stakeholders within the enterprise to ensure that our client's Privacy Program investments are optimized, and to lower our client's overall annual cost of compliance.... read more > >

Testimonials

“Churchill & Harriman has provided exceptional support and service across a number of highly visible risk management activities across the globe. You and your team have exceeded my expectations and done so on time and under budget, without exception. C&H conducts themselves with the highest levels of demonstrated competency and integrity on my behalf, recognizing required interdependencies and challenges while working on our critical global initiatives. Most of all, I deeply appreciate the substantive results C&H has produced for my colleagues and me. I recognize this is founded on the open and honest lines of communication I have with you and the C&H team.”

Chief Information Security Officer
Fortune 100 Corporation

"I am happy to endorse Churchill & Harriman to any organization interested in enjoying a close relationship with a risk mitigation consultancy that I consider an important part of my daily business. I can truly state, without hesitation, that Churchill & Harriman provides the highest degree of honesty, integrity and ethics, and has become a vital component to our success."

Director, Worldwide Information Security
Fortune 50 Corporation

"I want to express my appreciation for the outstanding service that your firm [Churchill & Harriman] has provided over the years. I consider you a trusted business partner who takes a deep personal interest in our success, and I appreciate your honesty and integrity."

Chief Information Security Officer,
Global Financial Services Corporation

"Churchill & Harriman has been consulting to us on enterprise-wide business risk mitigation matters for seven years now. We continue to receive the same dedicated service and support from C&H that we received from day one. Few business partners have provided such validated ongoing commitment to customer satisfaction."

Director, Worldwide Information Security
Fortune 50 Corporation