CSG case studies
CSG · Put your knowledge to work in context.
The Certified Security Governance (CSG) credential is offered by The SecOps Group, a UK-headquartered IT security company that describes itself as having two business units: CREST-accredited security consultancy and pentesting exams. The SecOps Group states that through its exams it provides "an authentic and credible certification program that is up-to-date and represents real life business risks." The CSG is aimed at practitioners who own or advise on security governance rather than hands-on offensive testing: GRC analysts, security managers and officers, ISMS and compliance leads, internal auditors, and consultants who must translate business objectives into security direction and evidence. The CSG case studies are 5 cases and about 3,390 words.
1Risk Appetite Without Metrics at a Payments Fintech
Northbridge Pay is an 850-employee payments fintech with three product lines: consumer wallet, merchant acquiring, and small-business lending. Six months ago the board risk committee approved a risk appetite statement: low tolerance for regulatory non-compliance, moderate tolerance for service availability, and high tolerance for innovation speed.
777 words, about 4 min2Normalizing a Hospital Risk Register Under Funding Pressure
Mercy Valley Health is a 12-hospital network with 18,000 staff and a 5x5 risk register containing 33 high risks. Scores are entered by any risk owner without a calibration guide; there are no treatment owners, due dates, or documented compensating controls.
703 words, about 4 min3Conflicting Breach Timelines at a Multi-Jurisdiction Payroll SaaS
Harbor Payroll is a 600-employee payroll SaaS provider headquartered in Ireland, with engineering in India. It processes payroll for 2.5 million employees across EU, UK, and US customers.
694 words, about 3 min4Rebuilding a Stale Policy Framework Without Stopping the Plants
Stellar Components is a 5,000-employee manufacturer with 22 plants. Its Acceptable Use Policy is six years old, stored as a PDF on the intranet, and never reviewed.
608 words, about 3 min5MSSP Auto-Renewal After a Missed POS Incident
Rivet Retail operates 1,200 stores and outsources 24/7 security monitoring to an MSSP. The three-year contract auto-renews in 45 days.
608 words, about 3 min