Business Challenge

Why ePlus?

• This organization was an existing ePlus customer but had never engaged ePlus for Security Services.
• ePlus was able to suggest a flexible and affordable approach that would provide the security expertise needed to address their concerns.

Solution

• Discovery and assessment to determine the scope of their needs resulted in a determination that additional resources would be helpful to meet their PCI, policy and other goals. This resulted in a one-year contract for vCISO services.
• The ePlus vCISO service assessed the customer’s existing cybersecurity controls and met the customer team where they were, helping them advance the maturity of their cybersecurity program to reduce risks to their data and organization, and to improve compliance to any required or chosen standards.

Business Outcomes

• ePlus vCISO Service has provided assistance with security policy, standard and process development and implementation, review of current security tools and improvements, education regarding potential risks and possible solutions to manage those risks, assistance in establishing a data inventory with classifications and management guidelines, and guidance regarding elimination of some PCI compliance gaps.
• Educating the customer on data governance and protection has led to better adherence to policies around data retention, purging of unneeded records, and has reduced data exposure risk.
• Positive business outcomes as a result of this work has raised interest in pursuing additional, complementary security measures.
• Satisfaction on the output from this engagement led to a contract extension whereby this customer will work with ePlus Advisory Services to improve their security posture further.

Similar Stories