Cyber Security Case Studies

A two-site practice could not honestly complete its Data Security and Protection Toolkit assertions. A gap review found six blocking issues; eleven weeks later they were Cyber Essentials certified with the toolkit evidenced.

A major customer sent a 140-question security audit. Three critical machines ran operating systems a decade past support and could not be replaced. Segmentation solved what a budget could not.

The mailbox had been compromised for five weeks. The amended invoice was perfect. What stopped it was a verification policy written three months earlier.

An acquirer flagged the retailer for a longer PCI questionnaire than the business could realistically satisfy. Restructuring how payments were taken was cheaper than securing what they had.