Situation
An international financial institution, established to promote the health of world economy, sought a balance between information security and information sharing. Imminent off-shore outsourcing of application development and infrastructure management propelled the financial institution to turn to the experts at Orange Parachute for an improved Information Security Management System (ISMS).

Strategy
Orange Parachute recognized internal resistance to a new information security management system. Many saw it as a catalyst to off-shore support, resulting in lost operational control. Others knew the ISMS was necessary, but dreaded political fallout. Orange Parachute conducted an assessment of the client's security program and its maturity and provided senior management a snapshot of strong and weak areas within its program.

In designing and developing the new ISMS, Orange Parachute conducted a transparent risk assessment that was sensitive to the organization's culture and existing practices. Additionally, they consistently reported information security metrics to management, elicited extensive employee participation and re-used or enhanced existing processes as much as possible.

Results
Because of Orange Parachute's experienced consultants, the international financial institution now has increased confidence and accountability in its ISMS.

• Management receives regular reports on information security and can readily access activity documentation.
• Staff holds outsourced service providers accountable through improved contract parameters, risk monitoring and service quality reviews.
• Internal business departments maintain more timely and clearly defined communication channels and responsibilities.

Orange Parachute continues to help bring the organization's ISMS to full maturity, and will facilitate the certification process for its core financial applications and processes.

Return to Case Study List

Note: HotSkills, Inc. launched Orange Parachute in 2007. This case study may predate the Orange Parachute name and launch, but the work was completed by the same consultancy.