A very large energy company that had grown by acquisition was burdened by conflicting and wasteful “legacy” security operations of various acquired companies. The company needed security to be less costly and more effective.

Assess and streamline security work activities and spending. Create clear, measurable objectives for all employees and departments related to security.

We established a mission statement with positive goals for clearer decision-making in the future. We organized major and minor areas of conflict and inefficiency in a project plan, then applied international performance excellence standards to each, followed by systematically improving each.

Trimmed waste from customers’ cyber security operational spending by measuring effectiveness of processes. Innovated risk management strategy, simplifying risk measurement and reporting, avoiding unnecessary technology purchases. Reduced team-hours of policy creation and management by 70% with a new security framework and lifecycle.