Datasec

BACKGROUND

Please describe your company and position.

I am the CISO of Abitab

Describe what your company does in a single sentence.

Abitab is a Uruguayan company dedicated to the management of payments and collections, financial correspondent and offers a wide range of financial services, including the collection of invoices, payment of salaries, payment of liabilities, national and international transfers, sale of tickets, cell phone recharges, and ticket sales

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• Renew the ISO 27,001:2022 Information Security Management System certification

SOLUTION

How did you find Datasec?

Referral

Why did you select Datasec over others?

• Good value for cost
• Good previous experience

How many teammates from Datasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Internal audit of the information security management system based on ISO 27001 and new controls ISO 27001:2022. Consulting to support compliance with all points to the new security benchmark, as well as recording and correcting the findings of the internal audit.
Among others, the mandatory tasks of the management system to be carried out stand out, beyond the operational level controls that have been implemented.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

ISO/IEC 27001 Certification

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Datasec demonstrated, as always, great commitment and responsibility to the project. As well as understanding with challenging delivery times, ensuring that the necessary project milestones are satisfactorily achieved at all times.

What was your primary form of communication with Datasec?

Email or Messaging App

What did you find most impressive or unique about this company?

Datasec's differential is its close and pleasant treatment provided by highly trained and competent professionals.

Are there any areas for improvement or something Datasec could have done differently?

Not identified

BACKGROUND

Introduce your business and what you do there.

I'm an executive at an IT services company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with {company_name}?

 We needed their team’s development expertise.

SOLUTION

What was the scope of their involvement?

Sudacé Digital Agency has been doing app development and design for us. We started the project by discussing what we were looking for and how we could achieve our goals. After that, they came up with a couple of ideas. We decided to move forward with them and have them take over the project from there.They’ve used React Native on the frontend and Node.js on the backend. We’re also using a hybrid system so that we can change the look and feel of the app, and they’ll be able to change the way we use the product. 

What is the team composition?

We currently have two developers and a project manager. We’ve also worked with a designator and a copywriter.

How much have you invested with them?

So far, we’ve spent $200000.0 –$999999.0 with them.

How did you come to work with?

summit was recommended to me.

What is the status of this engagement?

We started working together around May 2010, and our engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We’ve just launched the product, so there are no quantitative metrics to share yet. However, I could confirm that our users and internal team were pleased with the app’s usability and efficiency.

How did the company perform from a project management standpoint?

 We use several tools for communication, including Telegram, Skype, and Zoom. 

What did you find most impressive about them?

 What stands out the most about their team is their dedication to meeting our needs and providing innovative solutions.

Are there any areas they could improve?

No, there aren’t any.

Do you have any advice for future clients of theirs?

No, there aren’t any.

BACKGROUND

Please describe your company and position.

I am the CEO of Devsys Compliance Technology

Describe what your company does in a single sentence.

Devsys is a technology company specializing in compliance solutions, developing the CUMPLO360 platform, which provides a set of tools to facilitate compliance tasks

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• Design and implement an information security management system.
• Design and execute a training plan related to the ISMS.
• Obtain ISO 27001 certification.

SOLUTION

How did you find Datasec?

Referral

Why did you select Datasec over others?

• High ratings
• Referred to me
• Company values aligned

How many teammates from Datasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Datasec provided comprehensive consulting services for the implementation of our Information Security Management System (ISMS). Additionally, they delivered services such as penetration testing, vulnerability scanning, security infrastructure recommendations, and information protection measures. Key deliverables included a fully implemented ISMS, detailed reports on security vulnerabilities, and a comprehensive training plan for our staff.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The primary measurable outcomes were the successful implementation of an Information Security Management System (ISMS), the development of a continuous improvement culture for the ISMS, and obtaining the ISO 27001 certification with no observations.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project was successfully managed by Datasec. They met all the agreed-upon deadlines and demonstrated great adaptability to our specific needs throughout the process.

What was your primary form of communication with Datasec?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive aspect of Datasec was their deep knowledge of the ISO standard and best practices for implementing an ISMS. Additionally, their availability of highly skilled professionals in areas related to the project was remarkable.

Are there any areas for improvement or something Datasec could have done differently?

No, we are completely satisfied with the services provided by Datasec. We have no suggestions for improvement at this time.

BACKGROUND

Please describe your company and position.

I am the Director IT of Perficient

Describe what your company does in a single sentence.

Perficient is the leading global digital consultancy transforming how the world’s largest enterprises grow their businesses. We imagine, create, engineer, and run digital transformation solutions that help our clients exceed customers’ expectations, outpace the competition, and grow their businesses.

With unparalleled strategy, creativity, and technology capabilities, we bring big thinking, innovative ideas, and a practical approach to help the world’s largest enterprises and biggest brands succeed.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• They prepared us with the necessary resources to obtain the ISO 27.000 certification successfully
• Provide support as our security reference

SOLUTION

How did you find Datasec?

Referral

Why did you select Datasec over others?

• Close to my geographic location
• Great culture fit
• Good value for cost

What was the size of Datasec’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Implement an Information Security Management System that allows the certification of the company under the ISO 27001 standard.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Attestation of compliance for a 3er party

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management of the team was efficient and effective. They delivered the items on time, and they were a well-organized and streamlined process in place. This was a crucial aspect of project management, as it helped to ensure that deadlines were met and that we received our deliverables promptly.

Overall, it seems that the project management approach of this team is focused on delivering results that meet the needs and expectations of their clients

What was your primary form of communication with Datasec?

• In-Person Meeting
• Virtual Meeting
• Email
• Messaging App

What did you find most impressive or unique about this company?

Their expertise was evident from the quality of their work and the insightful suggestions they provided during our meetings. They demonstrated a deep understanding of our needs and best practices. The team's professionalism and dedication to their work were truly commendable.

Are there any areas for improvement or something Datasec could have done differently?

Work with different aspects of types of projects. Consulting projects and cybersecurity tasks have different priorities and speeds.

BACKGROUND

Please describe your company and your position there.

I have been working for BlueCross & BlueShield of Uruguay for 26 years. I am in charge of the IT department and since 2017 I assumed the role of CISO.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Datasec?

Due to the requirements of our headquarters we had to present a cyber incident response plan and become certified under the ISO 27.001 standard.

SOLUTION

How did you select this vendor and what were the deciding factors?

Datasec is a company in the Cybersecurity sector in Uruguay. We evaluated 2 other companies and chose Datasec for their track record.

Describe the project in detail and walk through the stages of the project.

After a gap analysis, in the first stage we created the incident response plan. Later we implemented the Information Security Management System, documented all the policies and procedures, performed internal audits, risk matrixes, ethical hackings and once we were ready we chose the external organization to obtain the certification. The whole process went very smoothly thanks to the great knowledge and professionalism of Datasec's consultants.

How many resources from the vendor's team worked with you, and what were their positions?

I interacted with 6 people in total.

• 1 engineer
• 2 consultants
• 1 internal auditor
• 2 ethical hackers

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

You can view the certificate stamps at https://www1.bcbsu.com.uy/acerca-de-la-empresa/#politica or I can send you the certificates themselves if you require them.

How effective was the workflow between your team and theirs?

As I mentioned before, everything went very well and the stages were completed on time and exceeded our expectations.

What did you find most impressive or unique about this company?

Everyone at Datasec has a strong commitment to the company and their customers. From the CEO to the consultants, ethical hackers and the SOC team.

Are there any areas for improvement or something they could have done differently?

No, since 2017 every year they improve the services they offer us, adding new technologies.

BACKGROUND

Please describe your company and position.

 I am the Group Internal Auditor of a financial services company 

Describe what your company does in a single sentence.

The company provides financial services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• Update the operational risk management framework, defining the risk matrix and key indicators.

SOLUTION

How did you find Datasec?

Referral

Why did you select Datasec over others?

• Close to my geographic location
• Good value for cost
• Referred to me

How many teammates from Datasec were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

The implementation of a risk management tool and the generation of reports

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Risk matrix and key indicators.

Meycor Sofware - implementation.

Risk magagement frameword

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The outcomes were always delivered on time and the quality of the work was excellent.

What was your primary form of communication with Datasec?

Virtual Meeting

What did you find most impressive or unique about this company?

It was a customized servce with high standards of professionalism.

Are there any areas for improvement or something Datasec could have done differently?

No comments

BACKGROUND

Please describe your company and position.

I am the CIO

Describe what your company does in a single sentence.

One of the five Regional Internet Registries.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• Implementation and operation of an ISMS and CISO role.
• Secure Software Development Training

SOLUTION

How did you find Datasec?

Referral

Why did you select Datasec over others?

• Close to my geographic location
• Referred to me
• Company values aligned

How many teammates from Datasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We have outsource our CISO role to Datasec. They have to propose a work plan and follow through it. This includes internal training, reviewing of contracts with providers, cybersecurity incident management among others. They are expected to provide high level advise in cybersecurity matters to management as well.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Internal and external audits. 
• Training webinars and presentations. 
• Advise during Board meetings.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We coordinate over slack and email and have at least one face to face meeting per week. They are responsive and deliver on time. They are also proactive in detecting where additional help may be needed and are able to draw from their extended team to provide additional service.

What was your primary form of communication with Datasec?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their understanding of the current cybersecurity landscape is outstanding.

Are there any areas for improvement or something Datasec could have done differently?

None worth mentioning.

BACKGROUND

Please describe your company and position.

I am the CTO of a software services company

Describe what your company does in a single sentence.

Software factory based in Latam serving clients in the US

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• ISO 27001 Certification
• Policies definition

SOLUTION

How did you find Datasec?

Referral

Why did you select Datasec over others?

• High ratings
• Pricing fits our budget
• Referred to me

How many teammates from Datasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Comprehensive ISO 27001 ISMS Implementation and certification

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Datasec provided integral support in implementing an information security management system, from the initial stages to obtaining the ISO 27001 certification. The company accompanied the implementation of all the requirements and cybersecurity controls and policies.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Communication was smooth, delivery on time and quality, budget not exceeded, very understanding and flexible when it comes to the company needs. They also offered training and awareness sessions. Datasec's team effectively led the project, ensuring a seamless implementation of the ISMS.

What was your primary form of communication with Datasec?

• Virtual Meeting

What did you find most impressive or unique about this company?

Their flexibility and hand-crafted solutions are impressive.

Are there any areas for improvement or something Datasec could have done differently?

None that I'm aware of

BACKGROUND

Please describe your company and position.

I am the Product Manager of Infocorp

Describe what your company does in a single sentence.

We are a technology company that develops an omnichannel digital banking solution and provides implementation services for said solution.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Datasec to accomplish?

• Implement an Information Security Management System (ISMS) and obtain ISO 27001 certification

SOLUTION

How did you find Datasec?

• Online Search
• Referral

Why did you select Datasec over others?

Referred to me

Describe the scope of work in detail. Please include a summary of key deliverables.

• Know How necessary for the implementation of the ISMS.
• Support for the execution of all the activities necessary for the successful certification.
• Carrying out training and awareness activities for the personnel involved in the project and all personnel.
• Internal audit of the ISMS in order to cover all the management requirements of the implementation of the ISMS. MEYCOR GRC Software as added value.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• ISMS implemented
• Successful audits
• Certification achieved

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Excellent execution of the project, adequate monitoring of the milestones, high commitment to the agreed objectives, they met the expectations we had of them and the process.

What was your primary form of communication with Datasec?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Knowledge and professionalism

Are there any areas for improvement or something Datasec could have done differently?

At the moment, I do not find an improvement opportunity to recommend