Agile and  Modern IT Solutions

Our client has initiated a comprehensive evaluation and approval process for the Google Cloud platform, aiming to align with the stringent security standards outlined in the GC Canadian Centre for Cyber Security (CCCS) Cloud Security Controls profile of Protected B, Medium Integrity, Medium Availability (PBMM). This endeavour involves meticulously examining the Google Cloud environment to ensure compliance with the specified security controls. This enables the organisation to enhance its cybersecurity posture and safeguard sensitive data following industry best practices.

The project meticulously outlined procedures for collecting crucial evidence to ensure compliance with security controls. Tailoring of the Canadian Centre for Cyber Security's ITSG-33 Security Requirements Control Matrix (SRTM) specifically addressed PBMM requirements within the Google Cloud ecosystem. Each security control's evidence-gathering process underwent thorough scrutiny against established standards to confirm correct implementation and adherence to stipulated criteria. This method facilitated a comprehensive assessment of the security landscape, empowering the organisation to rectify deficiencies and bolster cybersecurity resilience significantly proactively.

A prominent digital commerce company spanning nearly 20 countries, boasting a diverse team of designers, marketers, creatives, data scientists, and software engineers, faced the task of resolving authentication issues within their DUO system. This initiative addressed authentication challenges for over 5,000 users and 3,000 Windows machines, encompassing ADFS, LDAP, DUO, Windows HELLO, and auto-enrolment.

Our team conducted a comprehensive assessment of the client's DUO implementation in collaboration with a senior engineer to address the authentication issues. A robust redesign of the authentication system was executed and rigorously tested to ensure seamless functionality. Furthermore, client-side administrators were actively involved in training and knowledge transfer sessions to equip them with the necessary skills to maintain the optimised design in the long term.

Our project focused on effectively mitigating risks in the critical mining industry. We aimed to enhance proactive threat detection and response mechanisms. By implementing file server agents and optimising remote desktop connections, our client in the mining sector successfully minimised vulnerabilities and significantly lowered the potential for security breaches.

By leveraging Helix's capabilities, we established streamlined security operations for our client. The centralised management and automation implemented ensured efficient incident handling and optimal resource allocation. Additionally, Trellix offered robust reporting features, enabling our client to showcase compliance with industry standards and regulations. This enhancement in transparency and adherence to rules has strengthened trust with stakeholders and bolstered the overall credibility of the organisation.