‍

Client Background

A research data and analytics company specializing in the entertainment, media, and sports industries. After a merger, the company was left without a security team and needed to enhance its cybersecurity posture to meet investor expectations. They struggled with a lack of resources, strategy, and roadmap planning.

The Problem

With a subpar cybersecurity posture falling below the baseline at 70%, the company needed to create a robust security roadmap, establish key policies like annual recovery testing and patching, and prepare for an upcoming ISO 27001 audit. Without a clear plan, they were at risk of failing compliance audits and falling behind other portfolio companies in terms of security standards.

The Solution

Cycore, acting as the company’s vCISO, started by conducting a comprehensive assessment of the company’s security posture. This helped identify critical gaps, allowing Cycore to develop a customized security strategy. The strategy aligned with business goals and included the following implementations:

• Established an Incident Response (IR) plan with third-party support.
• Conducted annual penetration testing and cloud environment security assessments.
• Implemented a company-wide security awareness program.
• Developed a governance plan for mobile devices and encrypted all company laptops.
• Created a detailed risk register and a security roadmap for the future.
• Implemented vendor risk management programs and security policies.

Cycore also provided full support during the ISO 27001 audit, ensuring that all necessary documentation and processes were in place.

The Outcome

The company’s cybersecurity posture improved significantly, rising to 93%, well above the industry baseline. Cycore’s support led to the successful completion of their ISO 27001 audit, securing certification. The improved security posture also helped the company mitigate risks, maintain their compliance, and close more deals by demonstrating robust cybersecurity measures to prospective clients.

"We were impressed with Cycore's strategic approach, which not only addressed our immediate compliance needs but also set us up for long-term security success. Their guidance was crucial in achieving ISO certification and has made a substantial difference in how we secure our operations and client data."

^{VP IT Enterprise}_{Research Data and Analytics Company}