About ThreeShield
A Montana LLC, built for US security and compliance.
ThreeShield Information Security LLC is a Montana limited liability company. It delivers US-hosted Lavawall®, independent security and compliance audits, and Tier 3 support, staffed by pre-screened, FBI-fingerprinted, US-based US persons who are eligible for CJIS and other US data-residency requirements.
What we do
Two things, done to an auditor's standard
US-hosted Lavawall®
The Lavawall® security platform on US infrastructure, so your data and its processing stay in the United States, operated by US persons who are vetted for the work.
Independent audits
Cybersecurity audits, GRC audits, penetration tests, and framework assessments, led by CISSP- and CISA-credentialed auditors.
Compliance, evidenced
SOC 2, HIPAA, PCI DSS, CMMC, NIST, CIS, and ISO 27001, with evidence collected continuously by Lavawall®, so the audit is a review instead of a month-long scramble.
Leadership
The senior team accountable for your security, by name
Chris Nowell, MBA, CISA, CISSP
Compliance, security, audits, and direction.
Angie Wisk, MBA
Partner relationships and HR.
Saad Alfakir
Development and code reviews.
Tyson Jamison
Technical support.
Where the methodology comes from
Enterprise-grade auditing, for organizations that have never had it
Our founder, Chris Nowell, established the computer-assisted audit techniques programs at United Technologies Corporation (its businesses are now part of RTX and Lockheed Martin) and at a government audit office, and wrote the Windows and Unix security analyzers that Ernst & Young, Deloitte, KPMG, NASA, Pratt & Whitney, and Sikorsky went on to license. Those analyzers are now built into Lavawall®.
That is the rigor we bring to every engagement: audits that typically surface 200+ findings where a scan finds a handful, and a team that stays to fix the critical ones with you.
Credentials and clearance
The people who touch your environment are qualified and vetted
CISSP & CISA
Senior staff hold the CISSP and CISA credentials and work to their formal codes of professional ethics.
FBI-fingerprinted, US-based staff
Pre-screened, background-checked, FBI-fingerprinted US persons, eligible for CJIS and other clearance-sensitive workloads.
Government & Fortune 50 experience
Decades of audit work across government and large-enterprise environments, brought to organizations of every size.
How we work
Ethics first, clients first
No fear-selling
Our CISSP and CISA certifications require adherence to formal codes of professional ethics. We tell clients what they need to hear, not what maximizes our invoice.
No lock-in
We don't lock clients into multi-year contracts. Our retention comes from delivering results. If a different solution would serve you better, we tell you, even if that means losing the engagement.
Never a competitor to your IT company
We don't sell managed IT in the US. We work alongside your IT company or in-house IT team, under written rules of engagement.
Platform and people on one bill
Lavawall® and the senior team that watches it, in one relationship, so findings get fixed instead of handed off.
The ThreeShield entities
Which company you are working with
ThreeShield Information Security LLC, a Montana LLC, delivers the US-hosted service and US engagements, and licenses the Lavawall® platform from ThreeShield Information Security Corporation, the platform's developer. Lavawall® is a trademark of ThreeShield Information Security Corporation, licensed to ThreeShield Information Security LLC. We keep the two clearly distinct, so you always know which entity you are engaging.
Work with a US-based security team
Tell us what you need to keep in the US and what you need to prove. We'll scope the platform, the audit, or both, before you commit to anything.
ThreeShield Information Security LLC · 1001 S. Main St. #11102, Kalispell, Montana 59901 (mail only)