GRUPO ORUSS

BACKGROUND

Introduce your business and what you do there.

I’m a financial coordinator at LogisticApp, a software development company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with GRUPO ORUSS?

We have a customer who needed payment software development to take payment transactions from customers securely.

SOLUTION

What was the scope of their involvement?

They developed a payment software for our customer.

What is the team composition?

Our main point of contact was the lead of the cybersecurity division.

How did you come to work with GRUPO ORUSS?

We evaluated several companies and decided on GRUPO ORUSS because they were able to adjust to our needs.

What is the status of this engagement?

We worked together from June–October 2020.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Their evaluation was over 10; the feedback has been good, and we received great support from them.

How did GRUPO ORUSS perform from a project management standpoint?

Communication was good; they were always in contact with us and delivered on time.

What did you find most impressive about them?

They showed a high level of knowledge; our engineers and the people involved learned a lot from their team. They were amazed and interested in everything they received from them.

Are there any areas they could improve?

I don't think there's anything they can improve on — we had full confidence in them.

Do you have any advice for potential customers?

Trust in their work.

BACKGROUND

Introduce your business and what you do there

I'm an IT analyst at an oil and energy company.

OPPORTUNITY / CHALLENGE

What challenges were you trying to address with GRUPO ORUSS?

We were looking for an IT services partner.

SOLUTION

What was the scope of their involvement?

GRUPO ORUSS does ethical hacking, training, and consulting for our business. We have been working with them in everything related to vulnerabilities and social engineering. They have provided us with consulting services on phishing, best practices for security, and everything about safety and vulnerabilities.

What was the team composition?

They assigned three people to our project.

How did you come to work with GRUPO ORUSS?

We had a licitation process in which several companies participated. ORUSS got the best score among all the companies we evaluated, so we chose to work with them.

What is the status of this engagement?

We started working with them in August 2020, and it is an ongoing collaboration.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

They provided us with detailed reports on our vulnerabilities to see our flaws and all the testing processes.

How did GRUPO ORUSS  perform from a project management standpoint?

Their performance is excellent. After their training and conference with our employees, they requested that we schedule more talks because they found the topics very interesting. We had perfect attendance, and they were great. The information they provided helped to create an awareness among our employees about security risks.

As for communications, they were great; we usually had meetings via Microsoft Teams and communicated mostly via email.

What did you find most impressive about them?

I like their management and the methodologies they used in every stage of the project. Their timeliness and attention to detail are also excellent; they often send us emails with detailed information about all processes and continuous advice to improve our security processes.

Are there any areas they could improve?

Having more extended conversations before the engagement would have been good.

Do you have any advice for potential customers?

Pay close attention to all the information they provide and all the tests they make so you can benefit the most from their work.

BACKGROUND

Introduce your business and what you do there.

I am a security manager at a data systematization consulting company, The company is a biometrics operator and has a certified data center.

OPPORTUNITY / CHALLENGE

What challenges were you trying to address GRUPO ORUSS?

To be able to obtain the certification as biometric operators, we had to pass a security screening and they did a vulnerability analysis for the company and presented the results to be endorsed so we could get the certification.

SOLUTION

What was the scope of their involvement?

They did a vulnerability analysis – ethical hacking.

What is the team composition?

Around 5 people worked on the project, but I have only met directly with the two project managers.

How did you come to work with GRUPO ORUSS?

They were referred to us. 

What is the status of this engagement?

We started this project last year, and we continue working with them on new projects. 

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

The analysis and certifications they implemented were successful. As for reports and support, it has also been great. They’re always there to support us. It has been a very good experience. 

How did GRUPO ORUSS perform from a project management standpoint?

We have our own project management tools. For the project with them, we just requested a schedule. The ethical hacking itself lasted only a couple of weeks after that came the testing and results. So we managed the schedule they sent us with our internal project management tools.

What did you find most impressive about them?

Their customer service was most impressive. They provide support 24/7 and their response is always immediate. 

Are there any areas they could improve?

Their pen-testing reports are excellent, but their vulnerability analysis reports could improve.

BACKGROUND

Please describe your company and your position there.

Grupo oruss collaborates with TechConsulting in the realization of pentesting

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire GRUPO ORUSS?

Client company hired us to carry out a black box type pentesting. They had had ramsonware and wanted to know where it could have entered and the vulnerabilities they had.

SOLUTION

How did you select this vendor and what were the deciding factors?

Several vulnerabilities were found and a complete report was made of the work carried out in order to secure the company.

Describe the project in detail and walk through the stages of the project.

be carried out a complete audit of 40 hours of work for the extraction of vulnerabilities of the different headquarters worldwide

How many resources from the vendor's team worked with you, and what were their positions?

1 security analyst and a penetration tester

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to perform a great audit job, revealing the vulnerabilities of the different infrastructures at the level of international communication, networks, and internal and external systems.

How effective was the workflow between your team and theirs?

The collaboration between GRUPO ORUSS and the internal team was wonderful. The personal treatment and the ease of work with which knowledge and results are transmitted.

What did you find most impressive or unique about this company?

They made a complete report with the vulnerabilities found and their solution. Allowing the company to program actions to close security gaps.

Are there any areas for improvement or something they could have done differently?

The way they work and the communication is perfect. We encourage companies to collaborate with them and work together since the relationship is win to win.

BACKGROUND

Please describe your company and your position there.

i work in the cybersecurity area, as an employee of a financial company

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire GRUPO ORUSS?

Permanent ethical hacking service, pentesting, vulnerabilities scan, consulting in resolution of incidents, Detection and removal of fake or spoofing URLs and APKs, 7x24 monitoring of social networks

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched a cibersecurity organization that allow us a total fulfillment of the requeriments in the Colombian regulation, between diferent options, Oruss adapted better to our necesities.

Describe the project in detail and walk through the stages of the project.

As the project still goes on, were convinced to say oruss's results are pretty good, they support us in every requesition we asked.

How many resources from the vendor's team worked with you, and what were their positions?

We had, 1 tester of apks, 1 pentesting tester, 1 reporter of vulnerabilities.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

everytime we needed something from Oruss they give us a report this is pretty accurate, detalied and we use as guide to solve any trouble

How effective was the workflow between your team and theirs?

we stand a very good communications between interested parts, with good communications the workflow is easier

What did you find most impressive or unique about this company?

the catalog of their services is unique

Are there any areas for improvement or something they could have done differently?

there's not any trouble with them

BACKGROUND

Please describe your company and your position there.

cybersecurity and information security professional

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire GRUPO ORUSS?

SOC Ethical Hacking

What were your goals for this project?

Agility and quality of service

SOLUTION

How did you select this vendor?

cost-benefit

Describe the project in detail.

SOC service, brand monitoring and ethical hacking

What was the team composition?

Red Team

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

100% ethical hacking of the platform in the established times

How effective was the workflow between your team and theirs?

100% ethical hacking of the platform in the established times

What did you find most impressive about this company?

Their ability to process agility was impressive.

Are there any areas for improvement?

No aplica