The Client
KIS is a registered charity serving immigrants, refugees, migrant workers, visible minorities, first-generation Canadians, and their families in becoming full and equal members of the Canadian society. They deliver programs and services designed to advance their journey and provide information, support, and tools to help each individual reach their goals and facilitate adjustment to a new life in Kamloops and the Thompson-Nicola Region.
Project Summary
Secure Shield conducted a comprehensive security audit of a registered charity. Services included digital and physical vulnerability testing, policy creation, as well as a five-step administrative controls review
Feedback Summary
Based on their findings, Secure Shield delivered critical feedback on meeting regulations and optimizing security at all levels of the organization. Their risk mitigation strategies are peerless. Because they are a smaller firm, they can offer more helpful personalized assessments.
The Solution
What was the scope of their service
they performed a 4 step Risk Assessment to help setup out information security program. Through this assessment, they identified many gaps including the need for policy creation and included these in our roadmap.
How did you come to work with Secure Shield?
Our Executive Director had worked with them on a previous engagement. The familiarity, and Secure Shield being a Cyber Security consultancy, made their services the right fit.
“Secure Shield has exceeded our expectations in understanding our organization inside and out to provide us with trustworthy cyber security solution and advice within our means. They have our best interests in mind, acting as a business partner, not a vendor.”
France Lamontagne
Executive Director
Kamloops Immigrant Services
Results and Feedback
Could you share any evidence that would demonstrate the productivity, quality of work, or the impact of the engagement?
They gave us a framework of how they see the information security program being built and how it would relate to us specifically. That has been really helpful. Everything right now is basically risk-based. Having a really good risk assessment is really key to that. Based on that, we’ve been applying the policies for all those risks. They do offer some classes. I know they have one that is for specifically for writing policies and procedures. They are really good at what they do.
How did Secure Shield perform from a project management standpoint?
We communicate by email and phone whenever I need it. When we were originally doing that assessment, I probably talked to them on the phone every day about a week with different questions. Then we met my Teams or in person monthly to review where we stood with the risk assessment. We are getting ready to do the vulnerability assessment and penetration testing.
What did you find most impressive about Secure Shield
In my opinion, one of the reasons I prefer them is that they really offer you very personal instruction and guidance. Some of the other companies that we’ve used are bigger. The last one we used, for instance, was so big. They are not real flexible in what they are going to do. You may want them to do a certain portion of it, but then you want them to do something a little different, but they are not willing to do that. Secure Shield wants to make sure that they give you exactly what you need, and that’s the primary reason that use them.
This type of service is unique at this point and time from what I see out there. They are just really helpful. They really want to make sure that the end result is what you wanted. If they are not going to really give you any kind of a benefit, then they really don’t want to work with you. The really want to know that their work is helpful to you. They have a great group of people to work with them.
Related Case Studies/Projects
Trusting your IT management to an outside company is scary – we get it. Visit our case studies to see the results we’ve helped other businesses achieve.
Our Cybersecurity Frameworks
