Cybernance

Cybernance, founded in Austin, Texas in 2016 by Mike Shultz, Bob Barker and Charlie Leonard, sells governance rather than detection: its platform, built around a proprietary Cybergovernance Maturity Oversight Model (CMOM) mapped to the NIST Cybersecurity Framework, is meant to give corporate boards and executives a structured way to assess and document an organization’s cyber risk posture across people, process and policy — not to monitor a network or catch an attacker.

The company has kept the platform aligned with the current version of the framework, updating to NIST CSF 2.0, and has picked up several third-party distribution and integration relationships: a collaboration with insurance broker Lockton Companies, availability of Cybernance’s audit capability through Finastra’s FusionStore marketplace for financial institutions, and reported use by Texas school districts working to meet state-mandated cybersecurity requirements. Those partnerships are a more useful signal of real adoption than the company’s own marketing, given that Cybernance remains a small team by industry standards.

One caution worth flagging directly: at the time of this review, Cybernance’s own public website showed signs of neglect, including what appeared to be injected spam content unrelated to the company’s business — a notable observation for a vendor whose entire pitch is disciplined cyber governance. For CISOs, Cybernance is a reasonable low-cost option for board-level NIST CSF governance reporting, particularly where a Lockton or Finastra relationship already exists, but the state of its own web presence warrants direct diligence on the vendor’s current operational rigor before relying on it for regulatory documentation.