Closing the control gaps blocking enterprise client onboarding
Cross border payments provider
- 90 days
- From assessment to all high severity findings remediated
- 100%
- Privileged accounts brought under multifactor authentication
- 4 days
- Average security questionnaire turnaround, down from several weeks
The situation
The business was losing enterprise deals at the security review stage. It could not evidence access controls, logging coverage, or an incident response process, and each questionnaire was answered from scratch by the engineering lead.
What we did
- 01
Assessed the control environment against ISO/IEC 27001 Annex A and NIST CSF, scoring findings by likelihood and impact
- 02
Prioritised remediation into a 90 day plan with named owners and reporting to the board
- 03
Implemented single sign on, enforced multifactor authentication, and quarterly access recertification
- 04
Established centralised logging with detection rules and defined escalation paths
- 05
Produced an incident response playbook and ran a tabletop exercise with the leadership team
The outcome
- 90 days
From assessment to all high severity findings remediated
- 100%
Privileged accounts brought under multifactor authentication
- 4 days
Average security questionnaire turnaround, down from several weeks
Let's establish whether we are the right firm for the problem.
Tell us what you are trying to achieve and we will tell you plainly whether we can help, what it would take, and roughly what it would cost. If the answer is that you do not need us, we will say so.
What to expect
- Initial consultation at no cost
- Mutual NDA signed before discovery
- Written findings you own outright
Enquiries are answered by a consultant, not a call centre. We typically respond within one business day.