Regal Credit Management is a financial services business that helps its clients develop impressive credit profiles. Their organization partners with a diverse mix of business management firms, accounting firms, financial planners, wealth advisors, and other financial institutions. Their certified FICO professionals use highly effective, cutting-edge credit management strategies to help clients achieve high quality results.
Due to the very nature of Regal’s business model, they handle extremely sensitive financial information about each and every one of their clients. At one point, Regal’s leaders decided they were going to take a more robust, comprehensive approach to their organizational security. Several of their financial partners had begun requesting information about the security measures Regal was taking to protect PII, PCI, and other sensitive data. Regal wanted to be able to demonstrate that they had a strong information security program in place. More than appeasing their business partners, Regal also sought to ensure they were compliant with the many industry regulations and laws applicable to companies in the financial services industry. Whenever Regal’s team members began researching relevant industry expectations and rules for their security plan, they were surprised upon finding they may not have been meeting each industry requirement. Already upset by this discovery, they became even more agitated when they realized how much it would cost to meet these requirements. Regal needed a knowledgeable, highly experienced, and empathetic IT security provider to help them foundationally upgrade their IT software security stance from the ground up.
Regal Credit Management hired a third party information security company to help them begin to meet the security compliance requirements. Shortly afterwards, the InfoSec company recommended Regal hire us as well. This recommendation was based on our IT advisors’ experience working with a variety of companies, knowledge of security compliance requirements relevant to various industries, and the quality of our Secure Software Development (SSD) services in protecting personally identifiable information (PII). Eager for more insight and assistance, Regal’s team met with ours to share in several valuable conversations about their business model and their unique set of business practices. After speaking with our team about their project, they happily selected us as their IT partner.
Meeting Specific Security Compliance Requirements
Our IT experts architected and implemented a highly secure Salesforce environment by following the Secure Software Development Lifecycle (SSDLC). The SSDLC is a comprehensive, complex, highly effective development process which fully integrates security into every step. Because Regal regularly deals with extremely sensitive information about their customers, they needed to have an equally secure product holding the information. We configured the Salesforce environment to highly encrypt sensitive information. As an extra security measure, internal access to this data is protected with concrete, need-to-know company security policies. Additionally, we also used the Angular HTML5/JavaScript framework to create a stylish client-facing web enrollment application that lives underneath Regal’s main website.
After providing our initial information security services and helping them meet security compliance requirements, Regal asked us to stay on as their IT partner to assist with recurring IT services and expertise. Today, we manage their Salesforce system and their custom enrollment system through code management, providing ongoing support, and answering any security questions they have.
Services Used
Technology Used
