Strengthening Cyber Security to Unlock Crucial Data Feeds

THE ASK

Percayso Inform is an innovative Insuretech organisation who provide insurance intelligence beyond traditional data enrichment by providing unique solutions at all stages of the insurance lifecycle. They deliver solutions for both insurers and brokers, helping their customers create a powerful competitive advantage.

Percayso sought to enhance the quality of data within its core services. To address these concerns and achieve their goals, Percayso needed to complete the substantial third party assurance requirements of the data supplier, Experian, a leading information services company.

CHALLENGE

Evidencing robust security controls

Percayso faced the challenge of demonstrating a commitment to providing secure operations in order to obtain the crucial data feeds. To satisfy Experian's stringent due diligence requirements, Percayso needed to undergo an immersive cyber incident simulation exercise. This exercise would not only test their response to real-world scenarios but also necessitate providing concrete evidence of corrective actions and lessons learned. Successfully completing these requirements was vital for Percayso to unlock growth opportunities and establish themselves as a trusted data supplier.

SOLUTION

Establishing a strong security posture

Percayso engaged tmc3 to support their journey towards achieving Experian due diligence requirements and enhancing their cyber security posture. The tmc3 team consisted of seasoned professionals, including a Chief Information Security Officer, Data Protection Officer, Information Security Manager, and Technical Security Architect/Secure Development Specialist.

In a matter of days, tmc3 organised a meticulously tailored cyber incident simulation exercise, specifically designed to test Percayso's response to a variety of real-world scenarios and threats. The exercise commenced with a comprehensive phishing campaign, leveraging tmc3's advanced Phishing Platform to validate the susceptibility of Percayso's employees to phishing attempts.

Simultaneously, tmc3 experts orchestrated a series of scenario injections customised to Percayso's unique risks and threat profile.To further evaluate internal processes and response capabilities, dedicated back office personnel injected simulated emails, texts, and telephone calls. tmc3 ensured minimal disturbance to Percayso's operational personnel during the exercise, allowing the company to maintain business continuity while improving their cyber security defenses.

Following the exercise, tmc3 provided Percayso a comprehensive report. It spotlighted best practices, spotlighted areas of concern, and set forth prioritised cybersecurity enhancements. Beyond satisfying Experian's due diligence, this report also crafted a strategic pathway for Percayso to bolster their defenses.

Customer Feedback

“tmc3's support has been fantastic. Responses always returned in a timely manner. Meetings organised at short notice when required. Great people, great organisation.”

Percayso Inform Kevin Delapena, Head of Operations