Challenge
The client had an extensive enterprise information security program, but the program lacked specific coverage of the company’s products throughout their lifecycle. They wanted to establish a product cyber security program that would address their global requirements and demonstrate effective governance of their unique product information risks to their stakeholders and customers. The client sought assistance with assessing the current state of their product cyber security and developing a framework to support their evolution of the program.
Solution
Experis used a tailored version of its governance assessment methodology to perform a conduct a high-level review of the current product cyber security program and developed a custom product cyber security framework based on several recognized standards to use as the basis for the assessment. We evaluated the currently policies, processes, controls and recent audit findings to determine significant gaps, improvement opportunities and program changes needed to implement the proposed product cyber security framework and achieve the desired level of information protection. Experis identified a significant number of gaps and improvements that would need to be addressed and provided a roadmap of pragmatic recommended actions to drive improvements.
The governance assessment report included:
- A customized Product Cyber Security Governance Framework
- Findings and analysis of the gaps in the current state of cyber security
- A comprehensive workbook of identified gaps and prioritized set of recommended program improvements
Results
Experis exposed some strengths and some significant issues with the current product cyber security governance and risk management environment. Our delivery included a roadmap of pragmatic actions and suggested improvements to their product cyber security program. Our inclusion of a detailed review of audit corrective actions as part of the assessment demonstrated the flexibility and client partnership principles Experis uses to deliver value in every client engagement.
To learn more about how Experis can help with your Cyber Security needs, contact us.
