Archives: Case Studies

BRAC Bank, one of the largest banks in Bangladesh was faced with the Central Bank’s mandate of PCI DSS compliance. But the bank was dealing with multiple challenges that ranged from lack of internal awareness and legacy infrastructure to the need to set up the entire process from scratch. SISA first conducted an educational workshop… Continue reading SISA’s training-led multi-phase assessment helps BRAC bank successfully achieve PCI DSS compliance

One of the world’s leading insurance companies, headquartered in Hong Kong, confronted challenges while scanning its network for PCI and PII data. Terabytes of data present in storage devices, databases, and cloud platforms spread across the dynamic environment made data identification and remediation a complex task for the insurance company. SISA Radar – SISA’s Data… Continue reading Hong-Kong based Insurance MNC Leverages SISA Radar to Reinforce Sensitive Data Discovery and Classification

A full-service commercial bank learnt that it was hit by a security breach following which its business operations were impacted significantly. The bank, at the time of breach, did not have an event monitoring solution to detect internal and external threats. On being notified about the breach, SISA performed a detailed forensic investigation and thereafter… Continue reading SISA’s ProACT MDR platform helps a leading bank in Africa improve its threat hunting and incident response

A leading bank in the GCC region was keen to achieve PCI-DSS compliance, but the bank faced challenges on multiple fronts. Lack of well-defined processes, a high level of end-of-life (EOL) systems and a complex infrastructure landscape born out of a merger, expanded the scope of assessment. SISA first conducted an in-house workshop for senior… Continue reading SISA’s consultative approach helped a GCC banking major ease PCI compliance journey and improve security posture

As one of the leading enablers of digital commerce in the Middle East and Africa (MEA) region, the payment processing company was unable to successfully scan and remediate sensitive data spread across its huge data environment. Frequent network drops while deploying the agents and discovering sensitive data stored in external storage devices also posed a… Continue reading SISA Radar helps global payments processor optimize sensitive data discovery and storage

PCI SSC has laid down a firm set of rules for the organizations that store the sensitive authentication data in their networks. As per PCI DSS v3.2.1, sensitive authentication data must not be stored by the companies in the form of plain text, the data must either be masked or deleted. This case study describes… Continue reading Simplifying PCI DSS Certification and Bolstering Security with SISA Radar – Data Discovery Tool

For organizations that operate out of multiple locations around the globe, maintenance of a uniform PCI Calendar is a tough task. One of the top BPO companies headquartered in India was facing a similar issue when it went for PCI DSS compliance for the parent company as well as its subsidiaries (some of which, were… Continue reading Structured Approach to Multi-Location PCI DSS Compliance for Better Time Management

Given that most banks have been operational for several years, most of them run on legacy infrastructure. As technology evolves and online fraud become more prevalent, there’s growing awareness among these trustworthy entities on the need to be compliant with security standards such as PCI DSS. This case study details how SISA helped one of… Continue reading Helping Legacy Bank Achieve PCI Compliance in Record Six Months

Cyber-attacks are inevitable today. Intruders can gain access to the security layers of an organization even though the most robust defensive measures are taken against data leaks. This raises a serious need to understand what is happening inside security systems, address respective challenges, and update a stronger security posture from time to time. For the… Continue reading Mitigating Potential Data Breach through Lateral Movement Hunting