This team has operated for the past two years without Senior Security leadership. The team now has a CISO, and has added some staff.
The team has begun to create a mature security program, governance program, and contributing to the application development cycle in a manner that speeds up releases, production, and efficiencies. That plan is working towards taking a process that spanned many months down to weeks, or days.
The team has had to work backwards; many of the large projects they have tackled at once include policy review, and creation, governance, audit, and compliance program, risk management program, data classification, incident response, and baseline configuration programs.
A recent accomplishment took outstanding audit findings, some as old as two years, and resolved these findings by 80% in just two months.
The team continues to improve daily, and grow. The road-map to a mature security program lays in front of them, and the efforts so far has distinguished them as the clear Security Department of the Year.
