What we have delivered.

Context

Credit institution of a major banking group, with the requirements of a banking environment: privileged accounts to control, identities to federate, workstations and servers to keep at the level auditors expect.

What we did

1. 01 Implementation and operation of privileged access management: account vault, secret rotation, controlled sessions.
2. 02 Single sign-on and MFA for internal applications, with identity federation.
3. 03 Endpoint and server protection: policies, threat prevention.
4. 04 Security patch management and vulnerability remediation, in coordination with application teams.
5. 05 Coordination of the production security team and monitoring of emerging threats.

What it changed

• Privileged access centralised, traced and revocable.
• Unified authentication with MFA for internal applications.
• Regular patch cycle and a documented security posture for audits.

Context

Two large Belgian financial institutions, with the requirements of a banking environment: client files reviewed at onboarding, corporate clients subject to enhanced due diligence, systematic quality control.

What we did

1. 01 Onboarding reviews and client risk profiling.
2. 02 AML compliance checks in line with regulatory requirements.
3. 03 Enhanced due diligence on corporate clients, with beneficial ownership analysis and sanctions screening.
4. 04 Updating legal entity data: directors, authorised signatories, representatives.
5. 05 Support in setting up enhanced due diligence processes and coordination with quality control.

What it changed

• Complete, documented client files, ready for quality control.
• Beneficial owners identified and sanctions screening traced across corporate clients.
• Legal entity data up to date: directors, authorised signatories, representatives.