The importance of satisfied customers cannot be more important to our business. Measuring success within our accounts means a thorough retrospective look at the quality of our work, the accuracy of its scope, and the timely delivery of project deliverables. The following is a tribute to the many successes we enjoy to the benefit of our clients.
"Principal Security Group provides the same caliber of talent as the big four with the added benefit of flexibility and personalized service.”
- James C., CISO, Fortune 500 Institutional Investment Firm
“Principal Security Group is an agile and capable professional services firm whose staff conducts themselves with integrity and a high degree of competence and proficiency.”
- Russell P., Security Architect, Fortune 500 Retail
“Principal Security Group did a great job, not only with assessing our security environment but becoming more of a strategic partner with us to help us move forward. I would recommend them to perform these types of reviews at any company.”
- Robert W., CIO, Fortune 500 Bank
For a Fortune 500 Retailer, we architected an end to end e-commerce encryption solution to satisfy PCI requirements as defined by payment card merchants (Visa, MasterCard, American Express, Discover). Our solution provided for encryption of all payment related data in transit and in storage, and provides for security during processing from Point of Sale terminals through various mid-tier systems responsible for processing to the backend Mainframe.
For a Local Law Enforcement organization, we conducted a thorough forensics investigation cataloging the activities of over 600 users to determine the perpetrators. Detailed findings, including intent and damages, were documented in over 40 books of findings prepared and delivered to law enforcement officials who included a Sheriff's department, the FBI and Secret Service.
For a Fortune 500 Bank, our trained consultants worked within a group to ensure Sarbanes-Oxley compliance throughout the IT department. Business processes within IT were uncovered, mapped to COBIT control objectives, and investigative efforts were conducted to ascertain whether applicable controls and policy were being followed. Areas requiring attention were given special focus and effort. Our documentation provided the customer with a clear understanding of their business as it relates to compliance objectives within Sarbanes-Oxley.
For a Fortune 100 Insurance firm, we designed and built an enterprise and extranet 3-tier Microsoft Windows 2003 Certificate Services solution. The solution provided EFS protection to desktops, laptops, and select servers with full Key and Data Recovery; domain authentication, secure directory access via LDAPs, and secure email. User population was 35K+ and consisted of internal, external, and affiliates.
For a Fortune 200 Institutional Investment firm, we conducted a forensic analysis of a recent security breach, identified areas for improvement, and detailed our findings which included remediation steps for improved platform security, perimeter security, and remote access security.
For a Fortune 100 Retail Pharmacy, we served as project manager within a three-year project to address and resolve existing HIPAA related security issues for the firm. Guiding the efforts of a medium-sized team of managers and technical staff, we addressed gaps in security policy and procedures by following our well detailed roadmap to HIPAA security awareness, training, and remediation.
