Case Studies
Four organizations, four different problems, and what changed. Names are withheld under confidentiality agreements. The numbers are real.
Not ready to talk? Take the free Cyber Health Check: nineteen questions, about five minutes.
A unified ISO 27001:2022 management system in 11 months.
TRANSPORTATION
“Our policies say one thing. Our staff do another.”
Result: phishing incidents down 60%, repeat audit findings down, and one set of security rules that staff actually follow.
What we did: gap assessment against ISO 27001:2022, risk treatment, policies, vulnerability scanning and staff awareness.
From fraud worries to a funded plan in 8 weeks.
HOSPITALITY
“Can we trust our own numbers?”
Result: a ranked, funded plan with an owner for every risk. The first 4 critical issues are already fixed.
What we did: assessed IT controls, governance, backups and financial reporting, then built an eight-initiative roadmap.
Two cloud vendors rejected before they touched the data.
THIRD-PARTY RISK
“Can we trust this vendor with our data?”
Result: two vendors rejected for weak security. The client and the chosen vendor fixed the gaps before signing, including data ownership and cross-border responsibilities.
What we did: reviewed HR, financial, incident and procurement data (all personal or confidential) and sent a security questionnaire built on the CSA Cloud Controls Matrix v4.1, with every answer checked against evidence.
26 ways in. Found before an attacker found them.
BANKING
“Could someone actually break in?”
Result: 8 critical and 11 high-risk issues, ranked on one fix list with an owner for every item.
What we did: external and internal testing, Wi-Fi, physical entry, Active Directory and staff phishing.
