Cybersecurity
Program Management
to ensure compliance for a US-based utility company
The Challenge
Utility companies are subject to increased regulatory compliance, including Cybersecurity. A leading utility company in Florida, USA, established Cyber Security Framework Standards and the Cyber Security Policy. The company had to implement controls per the standards to comply with security standards, defend against Cyber Security threats to its critical infrastructure, and reduce the risk of data breaches and other incidents that could impact its stakeholders.
The Solution
Robosoft helped the program manage numerous initiatives to realize the compliance objective. Program management responsibilities included tight control over timeline and budget, selection of tool vendors, budget estimation, budget approval, and vendor onboarding. Operational responsibilities included overcoming on-ground implementation issues, Asset discovery, analysis, coordination with heads of respective sister organizations, and resource onboarding. Change requests had to be managed via a meticulous multi-step approval process. Understanding the ISO 27001 standards and its 114 controls was essential.
Robosoft helped the client roll-out, monitor, track, and course-correct multiple projects to realize their cybersecurity objective.
Robosoft helped the client roll-out, monitor, track, and course-correct multiple projects to realize their cybersecurity objective.
Program Management
Robosoft program managed multiple projects based on the framework derived by leveraging 14 standards of ISO 27001. Some of the initiatives rolled out included-
Privileged access management
Endpoint detection & response
Non-Windows device management
Network access control
Cloud Security
Firewalls
Internet proxy servers (WAF)
Cybersecurity Program Management Activities
Robosoft monitored projects for adherence to the timeline and budget, an essential program management activity; systematic evaluation of tools was carried out to enable respective controls, which is also part of the program management responsibility.
We also took care of issues such as the selection of tools that best met the security priorities of the client. Via a detailed evaluation of the available leading tools, features, ease of implementation, availability of support, pricing, local presence, and many other parameters.
Asset discovery: Many IT assets supporting OT were not inventoried. The OS details, version, OS flavor, connectivity, etc. Al. was not available. A project was rolled out to discover these assets and inventory them. These were brought into Cybersecurity compliance and subjected to the standards and tools listed earlier.
The projects rolled out by Robosoft covered Information Technology (IT) and Operational Technology (OT) assets.
Value Delivered
With Robosoft's assistance, several projects were successfully managed, which helped the client realize their cybersecurity posture and reduce their risk of a data breach. The program also helped the company improve its overall security posture and reduce its risk of a cyber-attack.
Secure your enterprise today with Robosoft's comprehensive security programs. Connect with us 
