Overview
A Fortune 50 global retailer with an extensive portfolio of internally developed, bespoke applications needed to identify, track, and manage risk through the software development lifecycle more accurately.
Driven by the organization’s recent shift to prioritize security, the program’s immaturity contained gaps in process, people, and technology.
industry
Retail / eCommerce
Challenges
Identifying & treating risk across an extensive portfolio of applications.
How STACKTITAN Helped
STACKTITAN extended and enhanced the organization’s capabilities via a 3-year staff augmentation partnership, through which STACKTITAN’s consultants led multiple tactical and strategic initiatives related to application security, vulnerability management, and general information security.
These activities included:
- Dynamic Application Penetration Testing
- Source code analysis
- Mobile Application Penetration Testing
- Network Penetration Testing
- Strategic guidance for risk treatment
- Technical training via instructor-led workshops
- Vulnerability management and SDLC gap analysis
100
25%
40%
4
Solution
Embed multiple consultants to provide specialized advisory and technical services to augment and enhance program and human resource capabilities.
Results
A full catalog of application risk was identified and prioritized. Process and resource gaps were eliminated to reduce false positive rate and assist with expedient identification and treatment of risk.
Next Steps
Additional enhancements to the Software Development Lifecycle can reduce the cost of identifying and eliminating risk through a shift-left approach.
