Their story:

As an IT Managed Services company, they store confidential information not only for their company, but also for their clients. They were reasonably sure that they were secure from a technical standpoint, but they knew they had some holes in the way they handled information.

They were also getting increased pressure from customers to prove their security. They were getting questions about security, security questionnaires, and requests for policies from customers.

What they needed:

They wanted to know what they didn't know, so they asked us to perform a full information security assessment. They wanted verification that they were technically secure, and they wanted to know any other gaps that they had. They realized how critical it was for them to be secure, since the loss of a customer's information would severely damage their reputation as a leading IT firm.

What we did:

We performed a full information security assessment of their External IT Security, Internal IT Security, Administrative Security, and physical security.
External vulnerability assessment including penetration test
Internal vulnerability assessment
Administrative risk assessment
Physical security assessment

The outcome:

Technical security was very good, as you'd probably expect. They did have a few issues though. For example, we were able to access their surveillance system online using a default username and password.

Policies and procedures were ok, but with some definite gaps that they were eager to remediate. To their credit, they take security of their own and their clients information very seriously, and they are putting our assessment to good use.

What they had to say:

"FRSecure helped us review and assess how we manage data security in our own business. Obviously, a high level of security is critical in our industry, and we know that our clients count on us to be thorough and careful. We needed a partner who would provide unbiased, expert evaluation and recommendations that were actionable.

The evaluation we received from FRSecure will result in industry-leading security within our company -- it will provide a competitive advantage to us, while providing still more security for our staff, clients and partners. It was "right sized" for our business and was realistic in its recommendations. I look forward to recommending FRSecure to our clients in the future!"