Resources
Case Studies
Information Security Audit Review for African Bank

Information Security Audit Review for African Bank

The client

The UK-based subsidiary of a noted African bank providing a range of domestic and international banking and financial services to individual and corporate clients

The work

We performed an audit review to provide risk assessment and controls assurance across IT network and perimeter security, IT General Controls and UK Data Protection Act compliance.

How we helped

Working with the bank’s operational teams, the COO and the CTO we mapped out key mitigating controls, assessing design adequacy and operating effectiveness across all material areas of information security risk. Understanding the controls and their operation in their day to day context meant that we were able to build remedial action plans which took account of the client’s current process and control maturity levels. Therefore, the plans were structured to permit control introduction and embedding in a sustainable and efficient manner with minimal disruption to the business.

Value added

By preparing an objective report on the bank’s technology control environment, which identified weaknesses, risks and detailed recommendations, the client was able to develop a risk-based remediation plan to bring the management of information security risks back within their risk appetite efficiently and sustainably.

Industry and sector:

Financial Services

Solutions and service area:

What our clients say

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do. "

Getac Technology Corp, Legal Affairs Center

ParkMobileUK, Managing Director

"Xcina Consulting performed an annual review of our card data environment, and ensured that we are compliant with the PCI-DSS. We continue to work with their experienced QSAs, leveraging their guidance and best practices so we have the highest possible level of security controls in place."

DKB Brands, Data Protection Officer

"Xcina really helped us to kick start our data protection compliance process. They took the time to speak to all departments of the business and outlined our highest risk to lowest risk areas. The insight and guidance they provided was essential for our business to become GDPR compliant."

Portman Settled Estates Limited, Estate Secretary

"Xcina’s ongoing support has ensured that our employees feel confident when dealing with data protection matters, with best practice knowledge and expertise from consultants who have taken the time to get to know our business and our industry."

National Bank of Kuwait, Compliance Officer

"Xcina worked with us on a number of data protection matters, including subject access requests and gave helpful, practical advice which reflected their understanding of technology issues as well as legal matters."

Your World Recruitment, Group IT Director

"We have worked with with Xcina successfully for two years, initially on internal GDPR GAP analysis. We now have them engaged as our ‘Virtual DPO’ provider and regularly receive useful, pragmatic and, more importantly, actionable advice on all areas of Data Protection."

Quadrangle Research, Group Chief Operating Officer

Discover how we have supported businesses like yours >>