# Firestorm Global

> https://firestormglobal.com

Firestorm Global is a cyber and AI risk consultancy that designs, runs, and continuously improves member-centric cyber risk programs for insurance pools, JPAs, and TPAs, and delivers cybersecurity services directly to the public institutions they protect. Deep specialization in public education (K-12 and community colleges) and public entities.

## Taglines

- Incinerate Risk (risk management)
- Illuminate Strategy (growth and adoption)

## What we do

- The Program: a complete cyber risk program for insurance pools and JPAs. Firestorm designs it, runs it, and reports on it; members get unlimited assessments, training, tabletops, monitoring, and same-day incident guidance. https://firestormglobal.com/program
- For Institutions: cyber risk assessments, external exposure scanning, training and tabletops, incident readiness and post-incident assessments, vCISO advisory, GLBA compliance programs, AI readiness and policy, ADA Title II accessibility, and vendor risk assessment, delivered directly to districts, colleges, cities, and other public-serving organizations. https://firestormglobal.com/institutions
- Insights: practical guidance on cyber and AI risk for pools, JPAs, and public institutions. https://firestormglobal.com/insights

## Technology platforms

- DeepEnd: portfolio risk intelligence for insurance partners, ranking risk and tracking control adoption across a membership
- StormWatch: continuous external monitoring with alerts when an attack surface changes
- StormView: external exposure review covering domains, services, certificates, and exposures
- Member Portal: secure resource library, scheduling, and protected communication for program members

## Principal

Tim Femister, Managing Principal. Featured in Forbes through the Forbes Technology Council and on NBC; presents regularly at industry conferences on cyber risk and emerging technology. https://firestormglobal.com/about

## Key pages

- Home: https://firestormglobal.com/
- The Program (for pools, JPAs, TPAs): https://firestormglobal.com/program
- For Institutions: https://firestormglobal.com/institutions
- Insights library: https://firestormglobal.com/insights
- About: https://firestormglobal.com/about
- Contact: https://firestormglobal.com/contact

## Selected insights

- What a Member-Centric Cyber Risk Program Includes: https://firestormglobal.com/insights/what-a-member-centric-cyber-risk-program-includes
- Board Reporting for Pooled Cyber Risk: https://firestormglobal.com/insights/board-reporting-for-pooled-cyber-risk
- The Economics of Member Engagement in Pooled Cyber Programs: https://firestormglobal.com/insights/the-economics-of-member-engagement
- Is Your Institution Ready for GLBA?: https://firestormglobal.com/insights/is-your-institution-ready-for-glba
- ADA Title II: What Public Organizations Need to Know: https://firestormglobal.com/insights/ada-title-ii-what-public-organizations-need-to-know
- Practical AI Governance for Public-Serving Organizations: https://firestormglobal.com/insights/practical-ai-governance-framework-for-public-serving-organizations

## Compliance framework coverage

NIST CSF 2.0, CIS Controls v8, NIST 800-171, FERPA, GLBA, HIPAA

## Industries served

Insurance pools, JPAs, and TPAs; K-12 education and community colleges (primary specialization); municipalities and special districts; healthcare; legal.

## AI policy

Firestorm Global uses AI tools to enhance our consulting services while maintaining human expertise and oversight. AI assists in analysis and documentation but does not replace human judgment in security recommendations.

## Contact

- Email: support@firestormglobal.com
- Contact page: https://firestormglobal.com/contact