Case Study
Don’t react to threats. Prepare for them.
I want to tell you a story. It’s a story as old as time, and perhaps you’ve heard it before, but this time it’s a little darker and not suitable for children.
Core Lesson
Seeing threats is not the same as understanding them. Buying equipment is not the same as building security. And generic reporting is not the same as risk reduction.
Case 01
The first little pig knew the risk. He could see the threats – wolf tracks around his building, howling at night, pig attacks in the neighborhood. He wasn’t dumb. He took a do-it-yourself approach, upgrading from a straw facility straight to brick, threw in a couple of cameras he bought from Amazon, and added a new lock to the door.
He never saw it coming, and the next morning…bacon!
Case 02
On the other side of the industrial park was an older and wiser pig. He had several sleepless nights after the first little pig mysteriously disappeared, before calling his security company. Perhaps you can see where this is going, but indulge me. His security company sent an “expert” with a clipboard and a generic TVRA template. He looked the part and talked a big game, but had never been face-to-face with a real wolf.
The pig spent ten terrifying nights…howling outside, heavy breathing at his door, paw prints visible in the morning dew…before opening the mail, to find an envelope containing an overly-broad security report and an invoice. Sure, there was some helpful advice, but it was mostly just a sales pitch for a more expensive security system.
He wasn’t satisfied and wasn’t sure where to turn. Consumed by other daily priorities, the report soon found its way to the bottom of an endless pile of papers on his little desk, and not long after…pork sausage!
Case 03
You guessed it: there is a third little pig, and yes, he did call HYCE. HYCE dug right into the little pig's actual vulnerabilities. With dogged determination, they evaluated the real risk and threat profile and helped the little guy prioritize his risk model.
They worked the problem and made concrete recommendations to mitigate not only bad wolf things, but the other things the little pig didn’t even know he faced. They made specific recommendations for fast detection and response, monitoring, and alerting. Finally, they helped the little pig understand that business continuity and disaster recovery are essential parts of his overall risk management strategy.
What Changed
But the story doesn’t end there. HYCE’s recommendations helped the third pig to find a wolf in pig’s clothing hiding in plain sight under his roof; they were there to guide him through attacks from distant wolves trying to blow down the doors on his computer; and they were there to educate his pigs on what to do if an active wolf got into the building.
You see, HYCE was not interested in a one-and-done security assessment…HYCE was there for the long haul…Fierce – Dependable – Loyal.
Fierce
Dogged determination to evaluate the real risk and threat profile instead of settling for generic assumptions.
Dependable
Concrete recommendations for mitigation, detection, monitoring, alerting, response, continuity, and recovery.
Loyal
Long-haul partnership instead of a one-and-done security assessment that disappears into a pile of paper.
Tell us what you are protecting. We will help you work the actual problem, not the template version of it.
Request a Consultation