Industry : Healthcare
Service  : Information Security
Date : 25 August, 2022
Status : In Process
Tags : VMS, SIEM, AppSec

About the project

Healthcare organizations hold a wealth of sensitive data, making them prime targets for cybercriminals. A successful breach could lead to the theft of patients’ personal and medical information. In addition to the theft of sensitive data, a cybersecurity attack on a healthcare organization can also lead to the loss of patient lives. For example, if attackers gain access to a hospital’s computer systems, they could disable life-saving equipment or change patients’ medical records. cybersecurity should be a top priority for healthcare organizations in order to protect their patients and staff.

What we did:

Measure the Cybersecurity awareness of students and staff

Conduct cybersecurity awareness training, phishing test, etc.

Achieve and enforce compliance with various standards efficiently and with minimal overhead

DOT49, TSA SD, ISO27001/27005, NIST 800-53, etc.

Final Results

  1. Efficient quarterly vulnerability patching program
  2. Awareness among employees and students about cybersecurity and phishing attacks
  3. Significant reduction in overall vulnerability counts
  4. Improved cyber security posture
  5. Penetration testing program to secure internet facing applications

C3 executed all the work and gave a full report of company’s shortcomings, including any issues and what can be done to mitigate them. We set up a meeting with security leadership and went through each one of the possible issues and what we can be done to resolve them. Customers were quite happy with the results and with what they found. They are now almost halfway through fixing the gaps and prioritizing anything of high risk.