Security

Cyber Security

WSC’s Information Technology (IT) Department is dedicated to cyber security and business continuity. In 2019, an Information Security team was created to improve our security posture and execute yearly strategic security roadmaps, updated annually; by doing so this maintains and strengthens our company’s ability to protect company and client data. The team conducts an annual comprehensive security assessment in tandem with monthly vulnerability scans and remediates identified issues. Our SIEM platform, AlienVault monitored 24/7/365 by ProCircular, is utilized to help improve our detection and prevention of attacks on our company’s equipment year-round.

A security awareness program was launched in May of 2020. Employees undergo training to spot ‘phishing’ scams and other malicious emails or attacks. These fraudulent requests are sophisticated and can use known company contacts to lure others into sending funds to illegitimate recipients or compromise confidential data and information. On a monthly basis, employees are tested internally and if the employee fails, they are required to go through additional training and in some cases meet with HR and IT for performance improvement. As scams are ever-changing, training and tips are provided to arm our employees with the knowledge to be a digital Brother’s and Sister’s Keeper and ensure we protect our family of companies and their employees.

Iron Mountain

In 2021, a major joint project with our IT, PMO, and HR departments was initialized and completed. More than 750,000 paper records were being stored on company property and needed to be secured and digitally managed. The project team worked with a new vendor, Iron Mountain, over the course of seven months to ensure all records were properly collected, safely scanned, and made securely accessible on a new digital platform. This project helped us to ensure these records weren’t at risk, allowing us to better manage their inventory, retrieval for review, and eventual retention removal. Doing this allowed us to move forward toward a paperless environment while keeping our documents safe.

Additional Security Measures

In 2021 additional security measures were implemented for the WSC headquarters. This included over 20 new or updated policies, procedures, or programs such as:

‒ vCISO Service Program

‒ Zero Trust Mission Statement

‒ Security Awareness Training and Testing Policy

‒ Temporary Elevated Permissions Agreement and Policy

‒ Information Security Diagram

In 2022, WSC will continue to implement tools and training for increased company preparedness and due diligence against increasing cyber security risk.

Cyber Security

70%

Cyber training completion across all companies compared to a 73% industry average

505

Hours of required annual cyber security training

2,037

Total hours executed on monthly security topic training over the year