Challenge

A leading Swiss IT service provider needed a comprehensive Zero-Trust architecture aligned with emerging DORA and NIS-2 requirements, plus a multi-year investment plan.

Approach

Conducted strategy workshops with executive management, designed Zero-Trust architecture per CISA/NIST 800-207, and integrated regulatory requirements into governance processes.

Results

• Zero-Trust architecture delivered and approved
• 3-year investment plan (EUR 3M) with prioritised measures
• DORA/NIS-2 requirements integrated into control processes

Challenge

Modernise detection and response capabilities across three globally distributed SOC teams, while reducing escalating SIEM costs and meeting NIS-2 regulatory demands.

Approach

Designed a hybrid multi-SIEM architecture (Microsoft Sentinel + UV Cyber), created a SOC Target Operating Model, and developed custom detection playbooks aligned to MITRE ATT&CK.

Results

• 90% log correlation across cloud environments
• SOC operating model with CSIRT structure adopted
• Detection playbooks aligned to MITRE ATT&CK and NIS-2

Challenge

Assess and harden the Google Cloud Platform security posture, addressing critical IAM vulnerabilities and low CIS benchmark compliance.

Approach

Performed comprehensive GCP assessment with automated scanning, conducted threat modeling for five business-critical applications, and aligned DevOps and SOC teams.

Results

• CIS benchmark compliance increased from 60% to 90%
• Critical IAM vulnerabilities remediated
• Attack paths documented for 5 core applications

Challenge

Design cloud and application security architecture for a national health platform during the COVID-19 pandemic, with urgent need for secure deployment of critical health services.

Approach

Built a DevSecOps framework per NIST SSDF, unified threat models across 10+ applications, and integrated security controls into CI/CD pipelines.

Results

• DevSecOps programme operational across 10+ applications
• Threat models unified and standardised
• Rapid remediation of security vulnerabilities achieved

Challenge

Realign Azure security architecture and governance for a large Swiss health insurer expanding into the cloud, meeting ISO 27001, NIS-2, and FINMA requirements.

Approach

Conducted Azure security audit, defined cloud governance framework for 20+ workloads, and developed IAM strategy with lifecycle and SoD controls.

Results

• Unified governance for 20+ cloud workloads
• IAM strategy with SoD controls implemented
• Security dashboards for platform teams and CISO

Challenge

Establish consistent provisioning processes and reduce security-relevant misconfigurations across 200+ AWS accounts in a large financial services organisation.

Approach

Developed automated account onboarding processes, integrated central security services into provisioning pipelines, and standardised controls across business units.

Results

• 200+ AWS accounts under consistent security governance
• Automated account onboarding with security controls
• Tagging and compliance requirements standardised