Aerospace machining supplier to U.S. and Canadian defence programs

The problem

Phishing incidents kept coming back after IT cleaned up, while the certification clock kept running. It was two problems on one network.

The approach

We investigated the breach independently. Then we tested the people, the systems and the building, and walked in uninvited to prove the point. From there we drew the controlled-information boundary, ran a mock audit and a second pre-assessment, and turned an incident into a compliance programme. Delivered with a specialist partner.

Anonymised at the client's request: the sector and the scale are described, the name is withheld.