IT Security GAP Analysis Case Study - Astell Scientific

Astell Scientific has been a world-leading manufacturer and supplier of laboratory, pharmaceutical & hospital autoclaves, and sterilizers for over a century, shipping thousands of autoclaves around the world.

Based in Sidcup, with over 40 employees.

The Challenge

Astell understands the importance of investing in IT and Cyber Security. Having already invested in improving the hardware and software security posture within the business, LP Networks undertook a GAP analysis of current internal training and highlighted additional staff training that could further increase the security of the systems and processes already in place.  Across all industries, there has been a significant increase in phishing emails as well as more sophisticated targeted attacks trying to leverage a lack of staff awareness surrounding potential threats.  Astell were keen to ensure that staff are as forearmed as possible.

The Solution

Having identified the GAP, we implemented KnowBe4, the leader in Security Awareness programmes.

Working closely with the management, we identified all relevant users that the User Awareness Training should be applied too. We configured the platform, with a focus on providing frequent awareness to the userbase. Weekly all employees will receive the latest scam information in an email, additionally every 3 weeks they are invited to watch a quick video and answer some questions relating to the video, and finally employees will randomly be sent fake phishing emails in an attempt to make sure they are being vigilant. Any employee who opens one of these emails will then be given additional awareness training.

Benefits

The staff within this business now receive a number of frequent reminders through multiple methods that phishing emails are dangerous and for everyone to be vigilant at all times.

Additional benefits of User Awareness Training is:  If a business is compromised due to a cyber security breach, and they can prove that they have taken steps to attempted to train their employees any potential ICO fine, could be reduced.