CASE STUDY

Situation

In a world of evolving technology and frequent threats, client – a growing Independent Power Producer, is looking to measure its current state of security.

Concerned about the rampant IT security challenges the organization was regularly facing, client decided to assess its current cybersecurity posture and gauge how its existing security strategy held against an outside attacker.

Recognizing that human error was one of its biggest challenges, client also decided to assess cybersecurity awareness levels on risks, threats, and best practices.

To do so, client engaged EC-Council Global Services to check the robustness of security controls on their IT infrastructure within a stringent timeline of two months.

Solution

EGS engaged a team of qualified security consultants to manage and work parallelly to ensure that the assessment at client various sites was completed as per plan.

• During this period, the team provided guidance and support to the person-in-charge of every site, and the SPOC ensured the collection of relevant information and managed the configuration and conduct of the necessary tests as per technical guidelines defined.
• Reports and Feedback were provided daily to track the progress of each site.

Services Delivered

EGS offered the customer a suite of cybersecurity services:

Recommendations

EGS offered the customer a suite of cybersecurity services:

Based on the services deployed, EGS then provided a thorough report, including recommendations to close any existing loopholes in the security strategy. The recommendations gave the company a clear, realistic view of its cybersecurity position and a path to improvement. The customer now has an effective action plan to reduce risk, as well as a sustainable framework to tackle current and emerging cyber threats.

• Post assessment and review, a detailed report with an action plan was provided to the customer.
• A risk report with appropriate ratings helped the client prioritize remediation efforts.
• A Security Awareness campaign that included simulated Vishing calls was conducted to select employees to enhance their awareness of social engineering attacks across the company. The heightened level of awareness is expected to:
  • Make security tangible and relevant to employees in their daily work
  • Ensure that the security maturity level is gradually increased
  • Ensure that leadership on all levels understand the critical role they play in showing clear support, involvement in – and adherence to the initiative
  • Lay the foundation for a lasting security culture, anchored in the core values and strategy of the organization.​

Result

The evaluation of the customer’s IT Infrastructure and the subsequent remediation ensured that the security risks of the customer were mitigated to acceptable levels. We worked closely with the client to improve their cyber status, policies, procedures, and employee awareness programs to increase their cyber maturity.

Engage with EGS: Gain greater confidence in your cybersecurity decisions by working with EC-Council Global Services’ thought leaders to apply our solutions to your specific business and technology initiatives.