Anonymised proof
Case studies
Real engagements, real outcomes. Most of our work is under NDA, so these are anonymised, but the situations, decisions and results are real.
Manufacturing
Ransomware night, and three weeks back to work
A European manufacturing group, 20+ plants, around 10,000 endpoints
Links cut within hours, business as usual in three weeks, every customer reconnected within three months, and a security programme the group still runs.
3 weeks
from the cut links to business as usual
Payments
What a first PCI 3DS assessment actually looks like
A card-payment processor running 3DS services for its banks
From 41 requirements with open points to a signed Report on Compliance, Attestation and certificate in two months, with a status letter for the processor's partners along the way.
41
requirements open after the on-site days, 6 five weeks later, 0 at signature
Payments
A Non-Compliant Report on Compliance, and the better plan that followed
An international e-commerce payments company, first Report on Compliance after years of self-assessment
A Non-Compliant Report on Compliance with fifteen requirements not in place and an action plan. The company accepted the conclusion, came back with a full remediation plan and firm milestones, and the work continues on that basis.
151
findings at gap analysis, 54 open at the escalation, 15 not in place at signature
Banking
Strong cryptography is not strong customer authentication
A European challenger bank for small and medium businesses
Not strong customer authentication, but comparable to the dedicated corporate protocols the regulator recognises, so aligned with the exemption for professional users. The bank knew exactly which sentence it could say.
4
factors analysed one by one against the regulatory text
Banking
A SWIFT assessment when SWIFT is outsourced
A European challenger bank reaching SWIFT through a service bureau
Thirteen of fifteen mandatory controls in place. The two gaps were on the operator workstation, and both were cheap to close.
13 of 15
mandatory controls in place; 2 gaps, both on one machine
Want a straight answer about your PCI scope?
Talk to a QSA, not a salesperson. First conversation, real answers.
Talk to a QSAOr reach us directly
- +353 1 691 79 38
Dublin
- info@247cyberlabs.com
Read and answered by a QSA, not by a sales desk.