Cyber Security Strategy for UK-based Wholesale Bank | Resources
Risk Management Consulting
 
 
Xcina Case Study

Cyber Security Strategy for UK-based Wholesale Bank

The client

A UK authorised and registered wholesale bank, offering a range of banking products and services in corporate and correspondent banking.

The work

Capture, document and agree the Bank’s strategy related to Cyber Risk, aligned with the bank’s products, services and business units.

How we helped

We worked with the Head of Operations and Head of IT, with additional input from the CEO, to establish the bank’s objectives, goals and risk appetite in relation to information and cyber risk. We started with developing their ability to identify emerging risks and respond to the evolving threat landscape. A framework was defined across a number of domains, comprising:
  • Governance
    • Steering committee
    • Roles and responsibilities
    • Policies
    • Reporting
  • Risk Management
  • Controls Management
  • Key Risk Indicators (KRIs)
  • Legal, Regulatory and Standards Compliance
  • Security testing of infrastructure and applications
  • Third Party Management
  • Incident Response
  • Business Continuity
The framework was supported by a detailed but pragmatic delivery roadmap. Which was presented to the Executive and Board for approval.

Value added

By working closely with management to understand the business and technology goals in detail we were able to provide a focussed and pragmatic strategy with an achievable and progressive roadmap which builds capability and maturity over time in a transparent and measurable way. Each milestone enabling a step up in maturity

Industry and sector:

Infosec/Cybersecurity

Solutions and service area:

What our clients say

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do. "

Getac Technology Corp, Legal Affairs Center

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do."

ParkMobileUK, Managing Director

"Xcina Consulting performed an annual review of our card data environment, and ensured that we are compliant with the PCI-DSS. We continue to work with their experienced QSAs, leveraging their guidance and best practices so we have the highest possible level of security controls in place."

DKB Brands, Data Protection Officer

"Xcina really helped us to kick start our data protection compliance process. They took the time to speak to all departments of the business and outlined our highest risk to lowest risk areas. The insight and guidance they provided was essential for our business to become GDPR compliant."

Portman Settled Estates Limited, Estate Secretary

"Xcina’s ongoing support has ensured that our employees feel confident when dealing with data protection matters, with best practice knowledge and expertise from consultants who have taken the time to get to know our business and our industry."

National Bank of Kuwait, Compliance Officer

"Xcina worked with us on a number of data protection matters, including subject access requests and gave helpful, practical advice which reflected their understanding of technology issues as well as legal matters."

Your World Recruitment, Group IT Director

"We have worked with with Xcina successfully for two years, initially on internal GDPR GAP analysis. We now have them engaged as our ‘Virtual DPO’ provider and regularly receive useful, pragmatic and, more importantly, actionable advice on all areas of Data Protection."

Quadrangle Research, Group Chief Operating Officer

Discover how we have supported businesses like yours >>

Subscribe to Updates

Receive regular updates from our expert consultants as they provide clarification and guidance on issues impacting your organisation.

Subscribe >>