CASE STUDY

University Hospitals North Midlands (UHNM)

Virtual CISO Consultancy

Overview

i3Secure was introduced as a new supplier to UHNM by trusted delivery partner M8 Solutions. This was during a period of resource challenge for the Trust (October 2021). The Chief Information Officer (CIO) and Head of Service Delivery were seeking an interim Chief Information Security Officer (CISO) to assume accountability and responsibility for Cyber Security operations.

 

The Challenge

The initial ask was to provide an on-site consultant to directly replace a departing employee, however due to covid-19 the Trust opted for a virtual Chief Information Security Officer consultant (vCISO).

i3Secure was selected as the preferred cyber security supplier because of a commitment to providing value for money, being flexible and for having deep rooted values – integrity, innovation, and ingenuity.

Key requirements for the position included ensuring Data Security and Protection Toolkit (DSPT) compliance, overseeing technical systems such as network firewalls, leading incident management response plans and developing the cyber strategy. We were able to deploy an experienced, CISSP level qualified CISO at the short notice of 3 weeks for a period of 3 months.

 

Our Solution

Our CISO began work on the Cyber Security Roadmap and Business Plan straight away which was well received by the Trust’s senior leadership team. Just several weeks after the role had begun, our CISO was faced with managing the Log4J incident, the effects of which have been widespread. Our CISO led the Trust’s response to the incident with laudable results, working around the clock with internal staff.

The Result

Following the successful management of the Log4j incident and development of the cyber security roadmap, our CISO quickly became the go-to person in the Trust for all cyber security matters. Due to our CISO’s exceptional performance, the Trust extended the CISO contract for a further three months. Having gained the trust of the senior leadership team at UHNM, our CISO was asked to help interview candidates for a full time CISO role to continue the good work and role out of the strategy.

At a Glance 

  • Fast deployment of virtual CISO to provide an immediate solution to the Trust’s resourcing challenge
  • Development of cyber security roadmap for UHNM 
  • Fast response and management of Logj4 incident
  • Ensured Data Security and Protection Toolkit (DSPT) compliance, oversaw technical systems such as network firewalls, leading incident management response plans.

Looking for CISO as a Service?

Discover more about our outsourced Chief Information Security Officer service.

A practical and cost-effective solution for an ongoing security presence

Find out more