Case Study: Truphone

The Client

Truphone believes that connectivity can be easier, smarter, and more efficient. Since 2006, they have built state of the art SIM software, intuitive management platforms, and a powerful global network to make this a reality.

Every day, their technicians engineer better connections between things, people, and business to make the world smarter. Headquartered in London, Truphone has 15 offices across four continents and continues to expand globally.

The Challenge

As a major provider of mobile recording, as well as other critical services for the finance sector, protecting client data is crucial. Client names, emails, financial information, call records, and transactions all need to be kept secure. When considering other technology providers in the security ratings space, Truphone needed better clarity when identifying critical vulnerabilities within Truphone’s external ecosystem. Other services proved unable to sort and present data findings and issues in a way that was conducive to interpretation and for remediation. “It took them three to four months to separate Truphone corporate assets from customer assets in order to determine what was affecting our rating,” said Nuno Teodoro, CISO, comparing the efficacy of other providers with what SecurityScorecard was able to do right out-of-the-box. Setbacks like these would require significant resources and make it more difficult for the team to report on the firm’s security posture to management. Truphone needed an intuitive solution to help the security team streamline and scale their operations.

The Solutions

Self Assessment
Truphone’s Cyber Defense Center relies on SecurityScorecard to identify potential risk within the firm’s digital assets in real-time, with continuous monitoring capabilities.

Third-Party Risk Management
SecurityScorecard provides Truphone with immediate and continuous visibility into the risks posed by third-and fourth-party vendors, ensuring cyberhealth and reducing the need for time-consuming yearly or bi-yearly assessments.

Executive-Level Reporting
Truphone uses SecurityScorecard’s security ratings as a metric in quarterly management meetings. SecurityScorecard’s A-F rating is a universally understandable reporting framework, resulting in higher Board Member engagement, a better understanding of where the firm stands competitively within the marketplace, and more productive conversations.

The Results

Improved Visibility and Remediation
SecurityScorecard provides a broad view of Truphone’s entire ecosystem. Its easy-to-use dashboard affords complete visibility into vendor risk, which leads to clear, actionable steps to remediation.

Reduction of Blindspots
SecurityScorecard is used in conjunction with pen tests to mitigate gaps and provide a true 360-degree view of risk.

Easy to Use Capabilities
SecurityScorecard groups vendors intuitively by risk into easy to manage portfolios. For Nuno Teodoro, user-friendly features like this separate SecurityScorecard from the competition.

Increased Team Engagement
SecurityScorecard’s ratings help to increase engagement and Truphone's visibility at the C-level, and throughout the company.

Competitive Advantage
SecurityScorecard helps Truphone understand the security posture of their competitors and is of particular importance when partnering with large financial institutions

Return on Investment
In addition to improving Truphone’s ability to win deals, the SecurityScorecard platform pays dividends in time and resource management.