The Challenge
One of the largest leading banks in Kuwait with a broad offering of consumer banking, wholesale banking, treasury, and financial services, is to develop and implement a transformation roadmap for compliance to regulatory directives. The humongous tasks for information and cybersecurity initiatives required key specialists to run their regulatory compliance program engaging all business units in the bank, and manage specialized areas of information security and compliance to achieve the business objectives and maintain adherence to regulatory norms.
Our Approach
Having understood our customer’s (Bank) requirements, D4 set out to deploy a team who are not just experts in the info-cyber security and program management domain but brings in years of experience in:
- Planning and managing regulatory compliance programs and multiple projects.
- Performing compliance & security reviews for applications and IT infrastructure.
- Driving cyber threat hunting to ensure robust cyber security protection.
- Proactive vulnerability assessments ensuring applications and network security with effective penetration testing capabilities for information security.
- Focused team with specialized skill-set in information security, cyber security, threat hunting, compliance, project management and governance.
Technologies
Various tools and solutions are being used in the following areas:
- SIEM solutions.
- Burp Suite.
- Security monitoring tools.
- PPM tools.
- Cyber Threat hunting tools.
- Cyber Security tools.
Benefits
- Delivery of a comprehensive regulatory compliance program plan.
- Establishing a systematic process to conduct compliance assessments across IT and application infrastructure.
- Application & network security pen testing for robust cyber security & protection.
- Info-Security compliance program for cloud infrastructure, applications, user access.
- Establishing a strong GRC with people, process and technology approach with implementation.
- Assess key information and cyber security projects for smooth implementation and effective ROI.
- Improve CTI platform for asset management and cyber security.
- Effective project and program management with greater level of coordination across business units.
Highlights
- Managing around 12-14 business entities.
- Various regulatory baseline frameworks.
- Reduction in decision-making process with effective management of RFP-> Implementation lifecycle for projects.
- Highest number of information security and data privacy incidents (30+ in a span of 1 year).
- 20+ compliance reviews completed within 3-4 months for users access, cloud applications security. ~40 cyber threat hunts completed within 2 months.
- Lead & manage major regulatory programs.
- Manage 15 projects across the bank, with improved adherence to timelines and scope.
