Click on a title to read a short case study.
Business Continuity and developement for a Global Life Sciences Company
The largest division of a Fortune 50 client engaged Churchill & Harriman to develop and successfully test a comprehensive Business Continuity Plan for them. In addition to delivering the new BC Plan, C&H provided recommendations for improvement in planning, process and Plan execution, leveraging industry best practices including BS 25999. Our recommendations were subsequently provided to our client’s Corporate Governance function so that they could be leveraged across their global enterprise.
Compliance Consulting for a Fortune 20 Financial Services Company
Our client’s objective was to become certified to ISO 27001 within their Global IT Infrastructure function. They turned to Churchill & Harriman. While consulting our client through the achievement process of certification to ISO 27001, C&H helped the organization harmonize two of five global IT processes into one, crossing departmental boundaries. In addition to resultant cost savings and process efficiencies, our work enabled our client to successfully address a Federal regulatory finding.
Information Security Services for a Global Life Science Corporation
To improve their risk posture, a Fortune 50 client determined to rigorously assess their global information security policies and practices. Churchill & Harriman was enlisted to conduct an ISO 27001-based Gap Analysis. C&H’s work revealed numerous opportunities for our client to optimize cost, controls, and processes within their global information security function.
Vendor Management Program Optimization
A major global financial services corporation that provides custody and asset servicing wanted to improve their internal and external risk posture. Churchill & Harriman was engaged for a series of projects. Existing vendor risk assessment criteria were mapped to ISO 27001/2 and BITS Shared Assessments Program elements, thus ensuring our client’s compliance with FFIEC guidelines and industry best practices. A new classification system for vendors was established that simplified and reduced the cost to both our client and their vendors. Additionally, a new approach to conducting information security and compliance assessments of the vendor base was developed, resulting in further and significant cost savings for both our client and its vendors.
Enterprise Privacy Program Strategy and Implementation for an International Pharmaceutical Corporation
Churchill & Harriman’s ongoing contributions have better positioned this Fortune 50 client to meet its global privacy compliance requirements, including Safe Harbor for all of its U.S.-based companies. C&H provides recommendations to our client on addressing the dynamic global landscape of privacy challenges, providing analysis and input on their Enterprise Privacy Program. C&H works in conjunction with other Compliance stakeholders within the enterprise to ensure that our client’s Privacy Program investments are optimized, and to lower our client’s overall annual cost of compliance.
Global Risk Assessments for a BPO
A publicly traded Business Process Outsourcing Service Provider (BPO) needed to meet security and privacy contractual requirements on a $1B contract with a new customer. Churchill & Harriman was chosen to develop risk (security, privacy, and compliance) criteria upon which our client’s vendors were subsequently assessed. Employing the new risk criteria, C&H then conducted several onsite risk assessments on the BPO’s vendors located around the globe, enabling the BPO to meet the security and privacy requirements their customer had of them.
