Description
PROJECT NAME
CISO as a Service
PROJECT STATUS
Ongoing (2022 – present)
PAID is a privately owned Insurance Company, created in 2009 from the merger of the 12 most important insurance companies in Romania, providing solutions and services to both commercial and non-commercial customers, managing a portofolio of over 2M insurance policies yearly.
Services
At Fort, we are your firm partner in safeguarding your business, ensuring your operations run smoothly.
Design and define IT Security Strategy
Security Awareness Training Process Implementation
Manage IT Vulnerabilities identified during penetration testing
Stakeholder management (external Insurance companies)
Support in external audits
Define and implement IT Risk Management Process
Security Architecture Review Report - Risk Assessment Report
Identify and implement IT Security solutions
Results & Outcomes
Policies and procedures inventory – the CISO team from Fort assisted PAID by identifying all existing policies and procedures and defining nomenclature & templating instructions, thus creating a robust security framework, with comprehensive security policies, procedures, and protocols.
Security Awareness and Training: the team at Fort defined and conducted regular training programs for employees to promote a culture of security awareness, educating staff on best practices, phishing, social engineering, and other relevant topics, ensuring that the personnel is adhering to a secure workplace.
Risk management and Incident response and management – the CISO team’s activities resulted in centralizing security requirements from all on-going contracts SLAs, including Incident & vulnerability management procedures, Change Management Procedures, Patch Management Procedures and SLA Management Procedures
Improved Governance & Strategic planning – the Fort CISO team, by using an integrated approach (with Data classification policy, including GDPR clauses), provided support in the implementation of work policies and guidelines that cover DLP and IP