International security compliance in 3 months instead of 6

Any company going international has to comply with international security standards, especially when it handles customers’ sensitive data such as credit card details, billing history and account information. One of our clients decided to go international and trusted HiTech to take it through the whole compliance process.

We ran a gap analysis of the company structure and processes against the sections of the “Technical Standards and Guidelines for Internal Control Systems and Internet Gambling Systems”, v3.7, issued by the Alderney Gambling Control Commission (AGCC):

1. Corporate structure and staffing
2. Accounting systems
3. Customer registration, verification, banking and management
4. eGaming
5. Computer controls

Senior management and stakeholders reviewed every gap. We proposed the changes and an implementation schedule, which was agreed.

Our specialists wrote all the required process documentation and records:

1. Policies: security, access control, BYOD, software entry control, malware, mobile and teleworking, secure engineering, information classification, information transfer, change management.
2. Procedures: software development, risk management, business continuity, disaster recovery, limited information management, incident management, training, internal audits and more.
3. Instructions: backup, risk assessment, security incident management, crypto-control.
4. SLAs.

Every change was implemented in 3 months, where such a project usually takes about twice as long. The company’s specialists checked the effectiveness of the changes, and an external audit later confirmed it.

Compliance audit →
Compliance hub →