Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and...

5
Case Study Delivery of IT Security Initiatives to Leading Insurance Underwriter Trusted Advisor for All Your Information Security Needs

Transcript of Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and...

Page 1: Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and resource planning combined with ZeroDayLab best practice enabled us to deliver the same

Case Study

Delivery of IT Security Initiatives to Leading Insurance Underwriter

Trusted Advisor for All Your Information Security Needs

Page 2: Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and resource planning combined with ZeroDayLab best practice enabled us to deliver the same

Our Solutions

The ClientBased in London and listed on the London Stock Exchange, this leading Insurance underwriter uses its insight to deliver excellence and achieve success across the risk-taking insurance business.

Our client operates at Lloyd’s of London through its underwriting syndicate as part of the Lloyd’s market, and enjoys the overall A (A.M. Best) and A+ (Standard & Poor’s; Fitch) Lloyd’s ratings. The client underwrites a mix of short and long-tail business.

The Group employs approximately 650 people based in London, Zurich, Australia and America.

ZeroDayLab has been working with this client as a valued IT security partner of choice since 2011, and has implemented many important IT security services on the client’s behalf to further strengthen their overall IT security posture in a complex and ever-changing business environment.

Page 3: Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and resource planning combined with ZeroDayLab best practice enabled us to deliver the same

Our Solutions

Key Projects Undertaken Include:

Full review of client IT strategy, gap analysis, recommendations and required remediation

Writing of all corporate-wide IT security policies

Writing of worldwide Employee Handbook

Education and Training to all 650+ staff globally

Full Web Application Penetration testing of critical applications

Complex review of client software applications and source code review

Architecture & Infrastructure review and analysis

Development of Active Directory

Policy review for BYOD (bring your own device)

ZeroDayLab has a full-time Senior Consultant on the client site providing daily support, recommendations and remediation as well as bringing together the full support and experience of the ZeroDayLab team to deliver complex IT security consulting services.

The ResultsFull project management and resource planning combined with ZeroDayLab best practice enabled us to deliver the same consistency and quality on all assignments on time, every time and always in budget.

Our Client’s Feedback:‘We are very proud of the continuing improvements we are making to consistently improve our overall IT security posture. Our clients demand confidentiality and security of their data and financial transactions and assurances that we are compliant with all current regulations.

By working closely with ZeroDayLab we are ensuring that we have an active program of continuous improvement based on their experience and our needs.

We believe we could not have achieved the level of success we have without the advice, support and guidance of the ZeroDayLab team of experienced consultants.

ZeroDayLab’s attention to detail, customer satisfaction, experience, knowledge, quality and consistency has enabled my team to align our IT strategy to our business strategy providing us with real TCO and ROI.’

Chief Information Officer

Page 4: Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and resource planning combined with ZeroDayLab best practice enabled us to deliver the same

Vulnerability Assessment of Desktop,

Servers and Infrastructure

Penetration Testing of all Internal/

External Web Applications and

Infrastructure

Broad Security Review (Architecture and

Infrastructure)

Source Code Reviews

Firewall Audits

Desktop and Server Build Reviews

Blockchain Application Security Audits

Digital Forensic Analysis

Security Awareness Programmes

Security Training for Developers - Secure

Coding School, CBT, Online Assessment

Pre-Breach Incident Response &

Runbook Training

Phishing Resilience Programmes

Bespoke Senior Executive Security Training

Red Team Testing

PCI DSS Remediation Support

Gap Analysis to ISO, PCI DSS, SSAE16(18),

NIST, GDPR

360° Reviews (Cyber Risk Assessment)

Virtual Data Protection Officer

Virtual Information Security Manager

ISO/NIST/EU GDPR Standards Alignment

Internal Audits

SERM - Supplier Evaluation Risk Management

Cyber Threat Intelligence - Deep & Dark Web

Protective Monitoring (Managed SOC)

Security Risk Training for Agile Developers

ZeroDayResponse - Incident Response Review

& Digital Forensics Training

Our Services

ZeroDayLab has a strong set of testimonials across a broad range of industries and sectors. If you are as passionate as we are about Total Security Management, then our team of highly skilled and experienced Security Consultants will be happy to discuss your requirements in more depth and define an appropriate IT security strategy suitable for all of your business needs.

Our experienced management team consistently delivers timely and accurate IT consulting services for our clients and retain trusted advisor status internationally.

Our team looks forward to sharing our vision with you and helping you to defend against the malicious attacks that come from both inside and outside of your environment.

As a l e ad i n g g l ob a l IT Security Consulting company, ZeroDayLab carries out IT Security Testing engagements for a broad range of public and private sector companies. Our depth and breadth of experience enables us to deliver high quality assignments that both identify all areas of your IT Security posture whilst also providing appropriate remediation and recommendations that tighten your overall security strategy on time and in budget with consistent quality and return on your investment.

At ZeroDayLab, every day is spent helping make our client’s infrastructure and applications more secure through the intelligent combination of highly trained consultants and services combined with leading edge, complementary security technologies that drives ‘Continuous Security Improvement’. We maximise ROI by delivering value for money services of the highest and consistent quality.

Why Use ZeroDayLab?

Page 5: Delivery of IT Security Initiatives to Leading Insurance ... · Full project management and resource planning combined with ZeroDayLab best practice enabled us to deliver the same

Passionate About Total Security Management

Europe Headquarters:

ZeroDayLab LtdSuite 303, 150 Minories,

London, EC3N 1LS, UK

Phone: +44 (0)207 979 2067

North America Headquarters:

ZeroDayLab LLC3524 Silverside Road, Suite 35B

Wilmington, DE19810-4929, USA

Phone: 1-302-498-8322

Amsterdam | Manchester | Edinburgh | Dublin | Brighton & Hove | Bangalore

www.zerodaylab.com | www.zerodaylab.nl | [email protected]