AXA UK is part of the AXA Group, one of the largest insurance brands in the world. As a group, they have 103 million customers worldwide and employ close to a quarter of a million people.
In the UK AXA specialise in:
- Insurance: Protecting homes, cars and businesses through a wide range of insurance products
- Healthcare: Affordable plans that offer peace of mind, here in the UK or internationally
Project Goal(s)
- One goal was to provide AXA with guidance in regards to information Security Management. Regulatory framework comparisons were made in relation to information security to prepare a business case
- Another goal was to help AXA formulate an access controls management system.
- Our final goal was to help AXA achieve cloud compliance providing them with guidance on the CCM framework to prepare a business case.
Contributions
- Successfully provided AXA with the guidance needed to help prepare for a business case in regards to implementing an information security management system that is most suitable. Within this section we covered the key internationally recognised security frameworks/standards such as the ISO/IEC 27001:2022, NIST Cybersecurity Framework, and CIS Controls.
- As AXA is a global company, regulatory framework comparisons were made in relation to information security to help prepare a business case.
- Guidance on Access Control Management was also provided to AXA via highlighting data roles and responsibilities and stating which roles should have access within the company.
- Lastly, AXA needed help with cloud compliance and in response we highlighted the CSA CCM framework and explained in detail why it is suitable for global needs.
Technologies/Framework/Platform for data/management/delivery
- Microsoft Azure
Outcomes
The Contributions above were all successfully implemented and hence the business objectives of AXA were successfully met and fulfilled in regards their information security and privacy needs. With the guidance provided by us AXA were able to formulate an appropriate business case that not only met their business objectives but also their compliance needs as a global company.