The challenge
A PE-backed wire manufacturer had no formal security program, no in-house security expertise and aging infrastructure that couldn’t support modern security controls. Then a data breach hit.
The company faced legal, customer and operational risk it had no way to size, and a mishandled investigation could have made its legal position worse. Without a standing program, another incident was only a matter of time.
Our approach
We supported leadership around the clock during the breach investigation, including connecting them with specialist legal counsel. We then assessed IT, security, operations and HR, upgraded the infrastructure to support modern security, and put in an information security program with company-wide awareness training.
From there we became the company’s managed security provider, monitoring, protecting and responding around the clock, with monthly application and network vulnerability scanning. A license review also found savings on cloud email.
The outcome
The breach was handled with expert guidance from first response through the legal work. The company now has a legally defensible security program and policies, continuous monitoring where there was none, and $40K a year in email license savings identified.
a year in cloud email license savings identified
application and network vulnerability scanning
