The challenge
A PE-backed automotive technology platform needed an objective view across IT, security, HR and operations. A flagship technology project had stalled without a clear diagnosis, the company’s custom software had no formal application security testing, and security, compliance and privacy practices were informal.
Without a baseline, the sponsor couldn’t size the cost-reduction opportunity or hold the plan to account.
Our approach
We assessed systems, infrastructure, security, people, processes and organization, then built a formal IT roadmap and a business case quantifying IT and HR cost reductions. We ran a root cause analysis on the stalled project and delivered a plan to recover it.
We also wrote the remediation plan and policies for security, compliance and data privacy, put application security testing in place for the custom software, and set up monthly vulnerability scanning of the network and applications.
The outcome
The business case identified $2M a year in HR cost reductions, and the sponsor received a quantified, prioritized roadmap rather than a list of observations. The stalled project has a diagnosis and a recovery plan, and the company’s software products are covered by a standing security testing program.
stalled flagship project diagnosed, with a recovery plan
vulnerability scanning of network and applications
