Client Outcomes
Get rapid results that create client trust, enable enterprise sales and reduce the risk of a cyber incident affecting your financial results.
Post Breach & New CIO: Rapid Security Improvement & Ongoing Fractional CISO Leadership for PE owned OpCo.
Challenge: Security was managed by an MSP with lack of visibility to the full IT estate, and a reactive approach.
What We Did: Tested the MSP's monitoring service, replaced with an independent and dedicated Monitoring service while rapidly executing foundational security improvements on key technologies. Built and executed against a multi-year roadmap to mature security in all areas.
Outcome: Incidents and spear phishing reduced to almost zero. Created a cyber aware culture, secure product development and readiness for exit.
Security Team outsourcing: Replaced existing FTE Security team and successfully led the org to a clean SOC2 report and acquisition by a public company.
Challenge: Inexperienced full time Security team was providing governance instead of partnering with IT, Product Engineering and the business.
What We Did: Rapid assessment and execution of key priorities, including Cloud Security Posture Management, Managed Detection & Response and readiness for SOC2 audit.
Outcome: Successful SOC2, significant risk reduction, due diligence and acquisition by a public company.
Global Security Program turnaround: Turnaround of program to secure four Tech Startups within a Global Fortune 500.
Challenge: Inconsistent security across Technology Startups within a large public company, resulting in unmanaged risk to the parent company.
What We Did: Took over the program, ensured proper resourcing, budget and collaboration to achieve program KPIs.
Outcome: Startups no longer posing an outsized risk to the parent company, key security controls in place and properly managed. Resourcing in place to sustain.
Full time CISO departure: Stabilization, FTE Hiring and onboarding of Consulting support, Stakeholder Relationship Improvement, Key Initiatives kept on track, Successful transition to new CISO.
Challenge: An organization experienced a gap in security leadership during a critical transition.
What We Did: Stepped in as interim CISO to stabilize the security program, maintain executive oversight, support hiring, and rebuild fractured relationships with the Executive team.
Outcome: Kept critical security projects and hiring initiatives moving until a successful handoff to the new CISO.
Compliance Readiness
(ISO27001, SOC2, CMMC, PCI-DSS)
Challenge: We specialize in helping companies minimize compliance and regulatory impacts on the organization, while satisfying clients, auditors and regulators.
What We Did: Through decades of experience, we have the unique ability to advise clients how to best "ringfence" what environments are subject to compliance frameworks like PCI-DSS, CMMC and SOC2.
Outcome: By reducing the scope of compliance requirements, clients reduce cost investment, fast track certification, and focus limited resources and bandwidth on reducing actual security risk.
Post Breach Attack Simulation: Tested the detection capability and response time of client's Managed Detection & Response Provider, and based on results led the successful RFP and onboarding of a new, cost neutral provider.
Challenge: Managed Detection & Response provider was underperforming and up for renewal.
What We Did: Conducted an Attack simulation to test effectiveness of key security technologies, determine provider response and containment time.
Outcome: While the security technologies operated as expected, the provider did not meet contractual SLAs. Replaced with a dedicated cost-neutral 24x7x365 monitoring provider that has exceeded expectations and acts as an extension of the CISO team.