Pharmaceutical Company Enhancing Cybersecurity Resilience with a vCISO

Customer Story

Pharmaceutical Company Enhancing Cybersecurity Resilience with a vCISO

A mid-sized pharmaceutical company with around $150m in revenue and 300 employees is rapidly expanding to new regions across the United States and abroad.

Client:

Mid-sized pharmaceutical company

Company Size:

$150M revenue

300 employees

Industry:

Pharmaceutical

Project Type

vCISO

The Challenge

The CIO owned all IT, Infrastructure and Security for the organization. As the company expanded, the security, compliance, and privacy requirements became critical for business operations.

The CIO required help around mitigating risk and protecting the company from threats and fines from HIPAA or GDPR/CCPA violations. The company faced challenges with limited security technology, inadequate processes, and insufficient documentation.

The lack of security expertise on staff hindered the organization from continued growth.

Our Solution

VCISO WITH
PHARMACEUTICAL EXPERIENCE

VCISO

RKON provided a vCISO with pharmaceutical expertise, enabling rapid impact and value creation.

SECURITY LEADERSHIP & STRATEGY

RKON provided on- demand expert security leadership to advance a cost-effective security program and establish clear communication with management, board of directors, investors and the government/regulators. RKON crafted a multi-year strategy to enhance security operations and technical capabilities while conducting security control assessments aligned with industry standards.

The IAM program was able to define its delivery objectives and measure with a management level balanced scorecard. New capabilities for privileged access management, secrets management, and vendor privilege management were expanded.The use and creation of roles increased, while entitlement-based provisioning decreased, leading to streamlined access requests and reviews with reduced processing times.The overall refined solution provided a solid foundation for more advanced capabilities including passwordless authentication, advanced identity proofing, and fine grained access controls to support zero trust initiatives.

More Resources

View All