Cyber Security – Privacy and Regulatory Compliance

Our Specialties

We are experts in delivering regulatory compliance assessments focusing on the industry standards needed to protect your company.

Regulatory Compliance

Our regulatory and compliance assessments use industry-specific frameworks to support your specific needs.

CASE STUDIES

Global Medical Device Company Turns to Experis for Data Protection and Risk Reduction

Experis leveraged our extensive experience in managing complex technical projects to aid a large global medical device and pharmaceutical company looking for solutions to protect data and reduce medical device business risk.

Cyber Security: Vulnerability and Penetration Testing - Red Team Attack

Our client, a rapidly growing retail company with online and brick-and-mortar stores, wanted to determine if and how a motivated attacker could compromise its networks and systems. While the client had taken significant steps to reduce the risks associated with storing and processing credit card information and other sensitive data, the company’s leadership was concerned that the business was still vulnerable to attacks that could compromise or disable its systems. The client wanted to mimic a realistic attack of its networks and specific high-value systems without disrupting business functions or alerting its operations team.

Cyber Security: Governance Compliance Assessment - NIST CSF and ISO/IEC 27001/2

The client had an extensive enterprise information security program, but the program lacked specific coverage of the company’s products throughout their lifecycle. They wanted to establish a product cyber security program that would address their global requirements and demonstrate effective governance of their unique product information risks to their stakeholders and customers. The client sought assistance with assessing the current state of their product cyber security and developing a framework to support their evolution of the program.

Cyber Security: Vulnerability and Penetration Testing – Healthcare Provider

Our client, a regional hospital and healthcare provider with multiple small, medium, and large facilities, wanted to determine where their facilities, services, and information were susceptible to a motivated attacker. The organization had an active information security program, but their leadership wanted a third-party evaluation to be performed. Experis was requested to use a variety of realistic attack methods to assess the adequacy of the security measures without disrupting business or patient services.

Cyber Security: Vulnerability and Penetration Testing – Municipal Water Utility

Our client, a regional public water utility servicing multiple cities, towns and, government facilities, wanted an in-depth evaluation of their core networks and systems to determine where their systems and services might be susceptible to a motivated attacker. The organization had deployed a variety of security safeguards but needed a third-party evaluation to establish the adequacy of the controls to their senior leadership. Experis was engaged to execute a variety of realistic internal and external attacks against the organization to assess the security measures without disrupting business or customer services.

Test and Continuous Quality: Identity and Access Management Testing Managed Service

The client, a Fortune 100 software company, wanted to move its identity and access management (IAM) product line to a managed testing service model to eliminate the overhead of personnel selection and management, and focus instead on business-driven results. The client was clear about what it was looking for: The managed services testing team would be responsible for the planning, preparation, and execution of test plans, and track and close defects related to all IAM projects. The client needed a partner to manage these day-to-day activities and the team’s performance through close collaboration. The client had an increased focus on test automation, innovation, and continuous improvement to maximize testing efficiency.

NEWSLETTER

Privacy and Regulatory Compliance