What Services Does ISA Cybersecurity Offer Under Its Cyber 360 Framework?

Updated

ISA Cybersecurity's Cyber 360 framework organizes its services into five pillars — Assure 360, Govern 360, Detect 360, Respond 360, and Protect 360 — spanning advisory, design and implementation, and managed services. The framework is designed to cover assessment, governance, detection, response, and protection so that security capabilities can evolve as an organization's requirements change. If you are evaluating vendors for a specific need such as a threat and risk assessment or managed detection and response, the pillar structure below shows which service line that need falls under.

The Five Cyber 360 Pillars

Pillar Focus Services Listed
Assure 360 Comprehensive assessments and assurance to identify and manage sophisticated threats, supporting security and compliance Threat and Risk Assessment, Offensive Security, Third-Party Assessments
Govern 360 Governance, risk, and compliance — strategic planning through risk mitigation, integrating security into business operations Posture Assessment, Risk Management, Compliance
Detect 360 Detection and management of threats with real-time insights for proactive defense Managed Detection and Response, Threat Intelligence, Vulnerability Management
Respond 360 Incident readiness, response, and recovery, with experts available 24x7x365 Incident Readiness, Incident Response and Recovery, Digital Forensics
Protect 360 Threat protection measures and security controls that enhance identity management and data protection Security controls for identity management and data protection of critical assets and infrastructure

Assure 360 — Assessment and Assurance

This pillar is aimed at identifying and managing sophisticated threats while keeping the organization secure and compliant. It includes threat and risk assessment, offensive security, and third-party assessments. Organizations that need an independent view of their exposure — or that must assess the risk posed by vendors and partners — would start here.

Govern 360 — Governance, Risk, and Compliance

Govern 360 covers governance, risk, and compliance services intended to help organizations address cybersecurity threats and regulatory demands. It spans strategic planning through risk mitigation, with the stated goal of integrating security into every aspect of the business. The listed services are posture assessment, risk management, and compliance. This pillar suits organizations that need to demonstrate compliance or build a structured risk program rather than respond to an active incident.

Detect 360 — Detection and Threat Management

Detect 360 provides detection and management of threats with real-time insights, positioned as a way to proactively defend against emerging threats and to make vulnerabilities in the network easier to understand and remediate. It includes managed detection and response, threat intelligence, and vulnerability management. This is the pillar to consider if the gap is ongoing monitoring rather than a one-time assessment.

Respond 360 — Incident Readiness, Response, and Recovery

Respond 360 covers incident readiness, response, and recovery. ISA states its experts are available 24x7x365 in the event of a breach and act as an extension of the team to contain an attack, limit damage, and accelerate recovery. Services listed are incident readiness, incident response and recovery, and digital forensics. Organizations without in-house incident response capacity, or those that want a retainer in place before an incident occurs, would look here.

Protect 360 — Protection and Security Controls

Protect 360 covers threat protection measures and security controls that enhance identity management and data protection, with the aim of keeping critical assets and infrastructure safe. Where Detect 360 is about finding threats, Protect 360 is about hardening the environment so fewer threats succeed.

How the Pillars Fit Together

The framework is not a menu of unrelated products — the pillars map to stages of a security lifecycle. Assure and Govern establish what needs protecting and under what rules; Protect hardens it; Detect watches it; Respond deals with what gets through. ISA describes its approach as adaptive and working "on your terms," so an engagement can start at the pillar matching the most pressing gap and expand from there.

Delivery Areas

Across all pillars, ISA lists three delivery areas: Advisory, Design & Implementation, and Managed Services. This means a given need — say, vulnerability management — can be addressed as advice, as a deployed solution, or as an ongoing managed service.

Practical Notes Before Contacting ISA

  • Incident in progress: ISA publishes a dedicated breach and cyber incident phone line (1 877 591 6711 #4) separate from general inquiries, so active incidents are routed differently than sales or advisory conversations.
  • Client evidence: The site cites Canada Life as a long-standing client using ISA for augmentation services and practical and strategic advice, and references a vulnerability management RFP where ISA was selected over other options. These are useful reference points if you want to ask for comparable engagements in your sector.
  • Pricing: The site does not publish pricing for any Cyber 360 service. The only pricing-related signal on the page is a "subscribe" keyword, with no pricing links or payment platforms listed, so costs must be obtained directly from ISA.
  • Scope confirmation: Because several service names overlap in common industry usage (for example, "posture assessment" under Govern 360 versus assessment work under Assure 360), confirm in your first conversation which pillar and delivery area a specific engagement will sit in.