Case Studies on Thompson InfoSec

Google Workspace Security Assessment

Sat, 28 Mar 2026 00:00:00 +0000

Industry

Public Technology Company

Scope

89 CIS controls + extended checklist

Framework

CIS Google Workspace Foundations

The Outcome

33 prioritized findings (5 critical, 11 high, 17 medium) with a tiered remediation roadmap covering OAuth hygiene, admin sprawl, DMARC enforcement, and AI controls.

The Challenge
#

A publicly traded technology company had never had an independent security review of its Google Workspace environment. The tenant had grown organically: administrators were added as needed, third-party applications were connected without formal approval, and configuration decisions were made reactively rather than against a security baseline. The company needed a clear picture of its exposure and a prioritized path to remediation.

ISO 27001 Certification From Disarray to First-Try Pass

Wed, 25 Mar 2026 00:00:00 +0000

Industry

Regulated Technology

Engagement

6 months

Frameworks

ISO 27001, SOC 2, HIPAA, HITRUST

The Outcome

First-try ISO 27001 pass with zero major nonconformities. SOC 2 and HIPAA completed on the same timeline. Policy library consolidated from 45 to 25.

The Challenge
#

A regulated technology company found itself without dedicated GRC staff, six months before a scheduled ISO 27001 certification audit. The ISMS had fallen into disarray: governance meetings had gone dormant, policies had proliferated without coherence, evidence collection processes had broken down, and several required technical controls were either missing or incomplete.

Multi-Site Network Security Assessment

Tue, 24 Mar 2026 00:00:00 +0000

Industry

Regulated Technology

Scope

3 continents · multi-site firewalls · colo + AWS

Drivers

First independent network review · upcoming compliance

The Outcome

First unified view of network security risk across all environments. Top two findings actionable within days. Full 6-month remediation roadmap aligned to operational capacity.

The Challenge
#

A regulated technology company with operations across three continents had grown its network infrastructure organically over several years. The environment included next-generation firewalls at several office locations, a colocation data center, and an AWS account supporting cloud-hosted security appliances and remote analyst access. The company had no recent independent review of its network security posture and needed an assessment ahead of upcoming compliance requirements.

Case Studies on Thompson InfoSec

Google Workspace Security Assessment

The Challenge #

ISO 27001 Certification From Disarray to First-Try Pass

The Challenge #

Multi-Site Network Security Assessment

The Challenge #

The Challenge
#

The Challenge
#

The Challenge
#