AB Storstockholms Lokaltrafik, SL (Stockholm Public Transport) needed to manage security in a large and complex technical environment, partly conducted by external suppliers. The client concluded that simply pushing a large set of security requirements onto the organisation did not give the expected results.
Knowit suggested using a decentralised security process, allowing for interaction on the security requirements in a controlled way. The process further strived for an attractive balance between security investments and the risk appetite the business could afford. The goal was simply to achieve secure enough solutions per system and meet all relevant compliance requirements at the lowest possible cost.
The process was further supported by our Compliance Portal, guiding the organisation through the process and giving security management full control.