AI-driven eCommerce search platform

Problem Statement –

• Client was required to obtain SOC 2 Attestation as part of its customer requirements on information security.
• CyRAACS was also engaged to provide CISO Services and manage the complete information security requirements for Client.

Services Delivered –

• Conducted gap assessment, against SOC 2 requirements, identified gaps and provided recommendations.
• Conducted a comprehensive risk assessment, identified risks across departments (Engineering, Facilities, Human Resources, IT Infrastructure etc.) and provided recommendations
• Reviewed SDLC practices, IT infrastructure setup, regulatory requirements etc. and identified opportunities for improvement.
• Developed policies and procedures for information security based on SOC 2 requirements, established processes and built the security program.
• Conducted Vulnerability Assessment and Penetration Testing (VAPT), identified vulnerabilities and provided recommendations for mitigation.
• Managed the complete information security program including development of policies and procedures, conducting assessments, reviews etc. leveraging a multi-disciplinary delivery team as part of CISO Services engagement.

Value Provided –

• Client received SOC 2 Attestation
• Provided the customer A Single Repository for Risks with controls mapping to SOC 2, CSA STAR, NIST 800-53, COBIT 5.0
• On-going sustenance of Information Security for SOC 2
• Demonstrated strong information security practice to customers.
• Strong leadership and Security Strategy designed by ex-CISOs.