Skip to content
Cocoon CS Cocoon CS
    • Know what is owned, what is open, and what happens next.

      Connect controls, evidence, policies, risk, supplier posture, technical validation, and reporting so teams can answer scrutiny without rebuilding the story.

      • See open work and accountable owners
      • Reuse approved evidence across overlapping frameworks
      • Give leaders a current view before the next review
      Explore the platform →

      Choose how your team needs to move forward

      • Platform overview See how leaders, program owners, and control owners work from the same current program view.
      • Compliance Toolkit Use structured workflows and templates when your team owns day-to-day execution.
      • Compliance-as-a-Service Add experienced operators when recurring compliance work is outrunning internal capacity.

      Start with the pressure you need to answer

      • All frameworks See where obligations overlap and which controls and evidence can support more than one review.
      • CMMC Prepare the owned work and evidence defence buyers and assessors expect to review.
      • CP-CSC Turn Canadian certification requirements into owners, evidence, and next actions.
      • ISO 27001 and SOC 2 Keep assurance evidence and remediation from becoming separate programs.
      • EU CRA and NIS2 Connect product-security and resilience work before obligations become last-minute projects.
      Cocoon CS platform workspace

      See what is owned, what is open, and what needs attention.

      Give teams and leaders a current view of controls, evidence, risk, suppliers, decisions, and next actions.

      View the platform →
      Continue exploringBrowse every frameworkBook a demo
    • Get experienced capacity where the program needs it most.

      Choose leadership, technical validation, and readiness services that help your team make decisions, close priority gaps, and keep accountable work moving.

      • Add experienced judgment without a full-time hire
      • Test critical assumptions before external review
      • Strengthen delivery across teams and suppliers
      Explore all solutions →

      Leadership and program capacity

      • Fractional CISO Bring security strategy, risk decisions, and executive communication into focus.
      • Fractional Compliance Officer Keep requirements, evidence, ownership, and readiness work coordinated.
      • Fractional Privacy Officer Strengthen privacy governance, accountability, and operational follow-through.

      Technical validation

      • Penetration Testing Test exploitable risk and turn findings into prioritized action.
      • Vulnerability Testing Find and prioritize technical weaknesses through repeatable testing.
      • Tabletop Exercises Exercise incident decisions, roles, communications, and recovery plans.

      People and industry readiness

      • Security Awareness Training Build practical security habits around the risks people face.
      • Phishing Email Campaigns Measure behaviour and reinforce safer responses with controlled campaigns.
      • Industry solutions Find a path shaped around the contracts, continuity, buyer trust, or privacy pressure in your sector.
      Cocoon CS platform and service solution

      Bring the right judgment, execution capacity, and validation together.

      Choose platform workflows and expert services around the decisions and gaps creating the most pressure now.

      Explore solutions →
      Continue exploringView every serviceFind your industry
    • Make the next compliance decision with clearer context.

      Use practical guidance to understand frameworks, changing obligations, and the operating work behind a durable cybersecurity compliance program.

      • Turn requirements into decisions and assigned work
      • Give owners and leaders useful context
      • Connect guidance to the next practical action
      Browse the resource library →

      Learn what the program needs next

      • Blog Read analysis that connects governance, cyber risk, and compliance to decisions teams need to make.
      • Workshops Work through focused cybersecurity topics with practical guidance your team can apply.
      • Events Meet peers and practitioners around current cybersecurity and compliance pressure.

      Start with a framework

      • CMMC readiness Understand the operating work behind defence supply-chain readiness.
      • Canadian certification Learn how CP-CSC requirements connect to controls, evidence, and ownership.
      • Global security and privacy Explore ISO, SOC 2, EU, NIST, and privacy framework pathways.
      Cocoon CS cybersecurity compliance resources

      Get useful context and a practical next step.

      Help buyers, operators, and leaders understand the pressure, the work it creates, and the next decision.

      Open the resource library →
      Continue exploringExplore the platformTalk with an expert
    • Helping regulated organizations build and maintain cybersecurity programs since 2001.

      Learn how Cocoon CS combines platform technology, governance experience, and repeatable delivery for teams facing recurring compliance pressure.

      • Cocoon CS has supported customers through successful audits and assessments
      • Platform and expert services can work together
      • Defined roles, evidence, and delivery discipline
      About Cocoon CS →

      Understand the company and delivery model

      • About Cocoon CS See the experience and delivery discipline behind Cocoon CS platform technology and expert governance.
      • Partnership Program See how MSPs, advisors, and service providers can standardize recurring compliance delivery.
      • Contact Us Ask about the platform, services, partnership paths, or program fit.

      Trust and legal

      • Legal hub Find the public agreements and policies that govern Cocoon CS services.
      • Privacy Policy Review how Cocoon CS describes its privacy practices.
      • Master Subscription Agreement Read the terms for use of the Cocoon CS platform.
      Cocoon CS cybersecurity compliance partnership

      A platform and delivery model built for repeatable work.

      Help internal teams and service partners use clearer roles, reusable workflows, and consistent delivery practices.

      Explore the partnership program →
      Continue exploringEmail info@cocooncs.comCall +1 (866) 965-3363
Log in Book a demo
  • Know what is owned, what is open, and what happens next.

    Connect controls, evidence, policies, risk, supplier posture, technical validation, and reporting so teams can answer scrutiny without rebuilding the story.

    Explore the platform →
    Choose how your team needs to move forward Platform overview See how leaders, program owners, and control owners work from the same current program view. Compliance Toolkit Use structured workflows and templates when your team owns day-to-day execution. Compliance-as-a-Service Add experienced operators when recurring compliance work is outrunning internal capacity. Start with the pressure you need to answer All frameworks See where obligations overlap and which controls and evidence can support more than one review. CMMC Prepare the owned work and evidence defence buyers and assessors expect to review. CP-CSC Turn Canadian certification requirements into owners, evidence, and next actions. ISO 27001 and SOC 2 Keep assurance evidence and remediation from becoming separate programs. EU CRA and NIS2 Connect product-security and resilience work before obligations become last-minute projects.
  • Get experienced capacity where the program needs it most.

    Choose leadership, technical validation, and readiness services that help your team make decisions, close priority gaps, and keep accountable work moving.

    Explore all solutions →
    Leadership and program capacity Fractional CISO Bring security strategy, risk decisions, and executive communication into focus. Fractional Compliance Officer Keep requirements, evidence, ownership, and readiness work coordinated. Fractional Privacy Officer Strengthen privacy governance, accountability, and operational follow-through. Technical validation Penetration Testing Test exploitable risk and turn findings into prioritized action. Vulnerability Testing Find and prioritize technical weaknesses through repeatable testing. Tabletop Exercises Exercise incident decisions, roles, communications, and recovery plans. People and industry readiness Security Awareness Training Build practical security habits around the risks people face. Phishing Email Campaigns Measure behaviour and reinforce safer responses with controlled campaigns. Industry solutions Find a path shaped around the contracts, continuity, buyer trust, or privacy pressure in your sector.
  • Make the next compliance decision with clearer context.

    Use practical guidance to understand frameworks, changing obligations, and the operating work behind a durable cybersecurity compliance program.

    Browse the resource library →
    Learn what the program needs next Blog Read analysis that connects governance, cyber risk, and compliance to decisions teams need to make. Workshops Work through focused cybersecurity topics with practical guidance your team can apply. Events Meet peers and practitioners around current cybersecurity and compliance pressure. Start with a framework CMMC readiness Understand the operating work behind defence supply-chain readiness. Canadian certification Learn how CP-CSC requirements connect to controls, evidence, and ownership. Global security and privacy Explore ISO, SOC 2, EU, NIST, and privacy framework pathways.
  • Helping regulated organizations build and maintain cybersecurity programs since 2001.

    Learn how Cocoon CS combines platform technology, governance experience, and repeatable delivery for teams facing recurring compliance pressure.

    About Cocoon CS →
    Understand the company and delivery model About Cocoon CS See the experience and delivery discipline behind Cocoon CS platform technology and expert governance. Partnership Program See how MSPs, advisors, and service providers can standardize recurring compliance delivery. Contact Us Ask about the platform, services, partnership paths, or program fit. Trust and legal Legal hub Find the public agreements and policies that govern Cocoon CS services. Privacy Policy Review how Cocoon CS describes its privacy practices. Master Subscription Agreement Read the terms for use of the Cocoon CS platform.
  • Log in
  • Book a demo
  1. Home
  2. About Cocoon CS
  3. Legal
  4. Cookie Policy

Cookie Policy

How Cocoon CS uses cookies and similar technologies on its websites and online services.

February 14, 2024

Legal documents

  • Master Subscription Agreement
  • Privacy Policy
  • Cookie Policy
View legal overview →

Cookie Policy, February 14, 2024

Cocoon CS Cookie Policy

This Cookie Policy outlines how Cocoon CS uses cookies and similar technologies on our websites and online services.

What Are Cookies and Similar Technologies?
  • Cookies are small text files that a website saves on your device to recognize your browser or store information and settings. Similar technologies, like local storage (e.g., HTML5) and web beacons (pixel tags or clear GIFs), help us identify your device and collect information to enhance your user experience, including navigation efficiency, preference remembering, functionality enabling, and insight gathering for site improvement and targeted advertising.
Usage of Cookies and Similar Technologies
  • Cocoon CS, our service providers, and advertising partners utilize these technologies to gather details on your device and interactions with our Sites. This data includes device specifics, browser type, IP address, pages viewed, and online activities, assisting us in enhancing our Sites, understanding user behaviors, and customized advertisements.
Types of Cookies Utilized
  • Essential Cookies: Crucial for technical site operations, allowing basic website navigation and feature usage.
  • Functionality / Performance Cookies: Improve site performance and functionality, enhancing the user experience.
  • Analytics Cookies: Collect information on site usage and performance, aiding in site improvement. We employ tools like New Relic and Google Analytics for analytics purposes.
  • Advertising Cookies: Gather information on your site activities to provide relevant, interest-based advertising.
Managing and Controlling Cookies

You can manage your cookie preferences through our Cookie Settings or by adjusting your browser settings to refuse non-essential cookies. Mobile devices also offer settings to restrict the use of advertising IDs for targeted advertising.

How can you control the use of cookies?

Other than “essential cookies,” which are required to allow our Sites to operate, you can control our use of cookies through our Cookie Settings.

You can also limit online tracking by:

  • Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org. Use the following links to learn more about how to control cookies and online tracking through your browser:
  • Firefox; Chrome; Microsoft Edge; Safari
  • Blocking advertising ID use in your mobile settings. Your mobile device settings can provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
  • Using privacy plug-ins or browsers. You can block our Sites from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers.
  • Advertising industry opt out tools. You can also use these opt out options to limit use of your information for interest-based advertising by participating companies:
  • Digital Advertising Alliance for Websites: aboutads.info
  • Network Advertising Initiative: networkadvertising.org
  • Platform opt-outs. The following advertising partners offer opt-out features that let you opt out of use of your information for interest-based advertising:
    • Google
    • LinkedIn
    • Bing
    • Facebook
    • Twitter

Opting Out of Cookies

  • Browser Settings: Instructions for blocking or deleting cookies can typically be found within your browser’s help documentation.
  • Mobile Device Settings: Limit the use of advertising IDs for interest-based advertising through your device’s settings.
  • Privacy Tools: Use privacy-enhanced browsers or plugins to block third-party cookies and trackers.
  • Advertising Opt-Out Tools: Opt out of interest-based advertising using tools from the Digital Advertising Alliance and Network Advertising Initiative.
  • Platform-Specific Opt-Outs: Many advertising partners, including Google and Facebook, offer opt-out mechanisms for interest-based advertising
Do Not Track Signals

Cocoon CS does not currently respond to “Do Not Track” signals. For more information, visit https://www.allaboutdnt.com.

Policy Updates

We may be able to revise this Cookie Policy periodically. We want to encourage you to review it regularly to stay informed about how we use cookies and related technologies.

If you have any questions or concerns about our cookie practices, please don’t hesitate to get in touch with us.

By email: info@cocooncs.com

Cocoon CS

Cocoon CS combines a cybersecurity compliance platform with white-glove services for regulated organizations navigating defence, enterprise, and global requirements.

CISO JoeThe AI agent that supports work inside Cocoon CS.

  • LinkedIn
  • YouTube

Solutions

  • Solutions Overview
  • Platform
  • Frameworks
  • Talk with an expert

Resources

  • Resources Overview
  • Blog
  • Workshops
  • Events

Company

  • About
  • Partnership Program
  • Legal
  • info@cocooncs.com
  • +1 (866) 965-3363

©2026 Cocoon CS Inc. All rights reserved.

Remote product demos and consultations are available.