Scaling Up Application Security for a Global Telecommunications Company

Embarking on a journey to reinforce its digital defenses, a top 50 global telecommunications company initiated an application security program with a laser focus on safeguarding its most critical and sensitive applications. While this initiative proved successful in elevating the company's security to industry standards, a realization dawned upon them—the need to extend the protective shield to encompass more data and preserve its hard-earned reputation.

Recognizing that not all of its approximately 700 web applications dealt with sensitive information, the company understood that a breach in even a less critical application could still tarnish its reputation. To address this vulnerability, a decision was made to collaborate with a partner who possessed profound expertise in application security and had the ability to swiftly scale up the testing program.

After partnering with Kroll, the telecommunications company experienced a multitude of security and operational advantages:

• Actionable data: The company found immense value in Kroll's detailed metrics, leading Kroll to become their client’s preferred application security vendor. Similarly, the reporting provided by Kroll became the standard across their client's penetration testing program. Executive reporting went beyond merely highlighting identified vulnerabilities and risks across the entire business group; it offered their client specific insights into the risk profiles associated with each individual vice president responsible for a group of applications. This approach provided a clearer view of the company's security posture, enabling individual segments of the business to concentrate on impactful security changes, and also facilitated tracking progress towards remediation goals for each part of the business.