Back to Case Studies
Security

"5 critical vulnerabilities. Zero by day one."

The Security Disaster

CRITICAL → LOW
Risk Level
5
Vulnerabilities Fixed
100+
Employees Protected

Situation

Security audit found disaster. Shared credentials between employees. Sensitive data discussed on WhatsApp. Personal devices accessing company systems with no controls. Excessive access permissions - cleaners had admin access. Email threads with personal data forwarded to wrong recipients. Risk assessment: CRITICAL. Potential fine: £17.5M+.

Task

Fix the immediate vulnerabilities and build a framework that prevents future breaches.

Action

Created comprehensive 223-page security framework:

  • 7 core policies: Staff Data Protection, BYOD Security, Data Breach Response, DSAR Procedures, ROPA, DPA Template, Security Incidents
  • Role-based access control matrix: Who gets access to what
  • 72-hour ICO notification procedure: Breach response plan
  • Day-1 immediate action checklist: What to fix right now
  • Risk assessment framework: Ongoing vulnerability identification
  • Training program: Staff understand their responsibilities

Result

  • Risk reduced: CRITICAL → LOW
  • All 5 breaches resolved within first week
  • Framework protects 100+ employees
  • Audit-ready compliance posture
  • Zero incidents since implementation

Ownership

I identified the vulnerabilities. I wrote every policy. I designed the access matrix. I created the response procedures.

Want results like these?

Tell me what's broken. I'll scope a fix and explain exactly what you'll get.

Email hello@anomalyops.com