Customer success stories.
Major financial institutions hand us identity, cloud, firewall, key management, endpoint and web filtering. Not six suppliers — one service, one owner, one reporting line.
Six situations, and who owns them now.
These six share a customer profile: a major financial institution with an estate that reaches past its own walls into group companies. Each card is one domain of that estate — the situation it presented, and who carries it today.
Identity and access for a US$25B-scale financial institution
People join, move and leave continuously. Every one of those is an access decision, and every access decision has to be evidenced.
The institution needed the joiner–mover–leaver lifecycle, the entitlement model and the certification campaigns held as one running service rather than a project that ends. That is what it handed over. The evidence is now produced as the work happens, instead of being assembled the week an auditor asks for it.
See the full engagement
Strengthening identity and access management for a US$25B-scale financial institution
- Location
- Tokyo, Japan
- Service
- Identity & Access Management (IAM)
We manage the enterprise identity and access environment for a large financial services organisation operating at significant scale.
The work keeps access to critical systems secure, controlled and reliable, and carries the organisation's ongoing identity governance and security operations.
Key areas
- Identity & access management
- Access administration
- User access governance
- Enterprise identity security
- Operational IAM support
Cloud security for a US$25–30B-scale enterprise
Posture, workload protection and cloud identity are three different problems. In most organisations they are three different suppliers as well.
The institution wanted them under one owner and one reporting cadence, because the gaps between three suppliers are nobody’s job until something falls into one. All three now run as a single service across its cloud estate.
See the full engagement
Managing cloud security for a US$25–30B-scale enterprise
- Location
- Tokyo, Japan
- Service
- Cloud Security
We run cloud security operations for a major financial services organisation with a complex enterprise technology environment.
The team works across cloud infrastructure and security processes to keep cloud operations secure, controlled and reliable.
Key areas
- Cloud security management
- Security configuration support
- Cloud infrastructure protection
- Operational security monitoring
- Enterprise cloud governance
Network and firewall security for a multi-billion-dollar institution
A firewall rule base only ever grows. Every rule had a reason once, and the reason is rarely written down.
The institution needed the policy set, the filtering configuration and the change control around them held together rather than separately. They are now held together — so a rule that is added has an owner, and a rule that has outlived its reason can be retired against a record instead of a guess.
See the full engagement
Protecting critical networks for a major financial services organisation
- Location
- Tokyo, Japan
- Service
- Network & Firewall Security
We provide firewall security management for a major multi-billion-dollar financial services organisation.
The work maintains secure network boundaries, manages filtering configurations and protects critical enterprise systems and services.
Key areas
- Firewall security management
- Security policy administration
- Network filtering configurations
- Access control support
- Security operations
Key management for a major financial institution
A key nobody has listed is a key nobody can rotate. Encryption is only ever as good as the inventory behind it.
The institution’s sensitive records sit behind database encryption, which makes the key lifecycle a control in its own right. That lifecycle came across whole — operations, generation, rotation and the inventory that lets somebody attest to all three.
See the full engagement
Securing critical data through enterprise key management
- Location
- Tokyo, Japan
- Service
- Key Management & Data Security
We run cryptographic key management and database encryption operations for a major financial services organisation.
The engagement covers the critical security processes across the cryptographic key lifecycle, holding visibility, control and operational discipline around sensitive enterprise data.
Key areas
- Database encryption operations — encryption processes designed to protect sensitive database information
- Cryptographic key generation — secure generation and operational handling of cryptographic keys
- Key compromise confirmation — verification processes related to potential key compromise and security incidents
- Alert reporting — defined reporting processes for key-management alerts and security events
- Cryptographic key inventory — visibility and control over enterprise cryptographic key inventories
Endpoint security across a major financial group
The estate does not stop at the parent company. Group-company machines sit on the same network and the same risk register.
That reach is what made endpoint coverage hard to hold in-house. It now runs to one standard across the institution and its group companies — from the build a machine starts life on to the certificate that would otherwise expire unnoticed on a weekend.
See the full engagement
Enterprise endpoint security at scale
- Location
- Tokyo, Japan
- Service
- Endpoint Detection & Response (EDR)
We run endpoint security operations across a major financial services environment, keeping enterprise devices, servers, certificates and deployment environments secure and up to date.
Key areas
- Client verification
- ADFS certificate renewals
- Server deployment support
- AIS terminal version upgrades
- AWS Golden Image upgrades
- Group company terminal support
- Endpoint security operations
Secure web gateway for a major financial institution
Every transfer is a web-access change. And every blocked category is somebody’s business need until it has been looked at.
The institution needed categorisation, blocking policy and the change traffic its own people generate handled as routine rather than as exceptions. A reclassification request and a personnel move now land in the same queue, with the same turnaround.
See the full engagement
Managing web security for a major financial services organisation
- Location
- Tokyo, Japan
- Technology
- Zscaler
- Service
- Web Filtering & Secure Internet Access
We run enterprise web-filtering and access-control operations using Zscaler for a major financial services organisation.
The engagement maintains controlled internet access across the organisation as business, security and personnel requirements change.
Key areas
- URL blocking & categorisation — Zscaler blocking policies and URL categorisation requirements
- Category classification changes — updates to website and content classifications based on business and security requirements
- URL revocation & expiry management — temporary access requirements, expiration dates and URL revocations
- Personnel transfer access changes — security and web-access policies updated when employees move between teams, departments or organisational entities
- Firewall filtering configurations — filtering configurations that maintain appropriate and secure network access
A different customer. The same handover.
A global insurance and device-protection provider had data science to do rather than defences to hold — a different problem entirely, handed over the same way. A defined scope, a named owner, and results reported on a cadence the customer sets rather than one that suits us.
See the full engagement
Turning enterprise data into actionable intelligence
- Location
- Tokyo, Japan
- Service
- Data Science & Analytics
We provide data science expertise for a major insurance organisation's data-driven initiatives.
The work turns complex enterprise data into meaningful analysis and insight, supporting operational visibility and informed decision-making.
Key areas
- Data science
- Data analysis
- Data processing
- Analytical modelling
- Insight generation
- Enterprise reporting support
What you are actually buying.
Intake
Every request arrives through one queue, whichever domain it belongs to.
Run
Changes are made under the customer's change control, not ours.
Evidence
Every action leaves a record built for the next audit, not for us.
Report
One cadence across all six domains, and one owner presenting it.
Review
Scope is re-cut when the estate changes, not when the contract renews.
Complex environments. Practical solutions. Trusted delivery.
The scope is exact. The customer is not named.
Everything above describes what we were accountable for, in the detail an evaluator needs. None of it identifies whose environment it is — that is theirs to disclose, not ours.
How we describe engagements →Let’s take ownership together.
Tell us what you need done. We will tell you what we would take on.