Highlight

Portfolio case studies that provide highlights of capabilities

Change Management

. : Identify

The worlds largest intranet provider with Department of Defense had challenges with IT service stability. We performed root cause analysis and traced the issue to un-managed and un-tested configuration changes in the live environment. These changes led to unexpected and sustained down time of services.

. : Engage

High level program leadership was consulted and buy-in was obtained for a holistic configuration change control and communications set of processes.

. : Frame

We created a plan that required the review of technology change in alignment with ITIL service objectives. We also included a communications, training, and certification process for any personnel that needed to make configuration change.

. : Solve

We assisted in the delivery of the IT service controls; facilitated planning, architecture, engineering, security, and advisory boards for over a year; and produced the communications and training materials, as well as issued certifications for personnel. In the first year, this led to a 250% improvement in availability from the previous years. The addition of controls also led to more structured and higher quality of delivery of IT services.

Data Security Architecture

. : Identify

A top banking institution was having difficulty with scoping and delivering their data security program. There was a gap in information between the front office, the security personnel, and the technology delivery organization.

. : Engage

We worked with technology and associated risk leadership to more clearly define the goals and objectives for the program. We ran workshops with both leadership and staff to understand not only the strategic direction but also the real world obstacles associated with current technology design and delivery.

. : Frame

We created a system approach for identifying business processes and associated technology implementations. We produced an inventory of those elements as well as identified targets of opportunity ranked by risk. The artifacts were used to justify a renewed effort around data security that included data classification, handling, and labeling policies and procedures and mechanisms for mapping these elements into systems of record. By integrating the data security objectives into the change and release processes, we were able to create systems of record that could be queried to identify where sensitive data was being processed, stored, or transmitted across the organization. We also were able to integrate system security requirements into the change and release processes to better manage the overall security posture and risks overall.

. : Solve

We executed workshops to collect the necessary information to design and deliver the solution. We then assisted the organization in producing policy and process documents, special BPMN diagrams depicting data handling, as well as advice to training providers. Our staff is CISSP trained and PCI-P certified, so we also were able to frame the deliverables in terms of both security and compliance.

Small Business Excellence

. : Identify

A distributor and manufacturer for force and pressure instruments across six different industries was unable to do business online. Their technology solution and service provider was unable to deliver the engineering and support required to maintain their online presence. The provider had developed a web site that was adequate to service the needs of the customers but did not scale for the connected digital needs of today. The provider also had not hardened the solution which led to automated attacks infecting the site and negatively impacting operations.

. : Engage

Galvoti engaged both the leadership and staff of the company to understand the problems identified above. The company assumed its desired modernization efforts would need to be deferred due to the expected site recovery costs. Galvoti worked with leadership to focus the efforts in a way that could meet all of their outcomes.

. : Frame

The company wanted to return to core operations and ensure no further compromise would occur. The company also wanted to modernize their online presence, streamline their information flow, and expand the capabilities of their online store.

. : Solve

Galvoti created an updated information design, iterated through a rapid prototyping process, identified a lightweight content management solution that could be hardened and maintained, and delivered the solution in under four weeks. This restored the company to operations, met their long term security objectives, and achieved the modernization they desired.