Zeus Capital is a Manchester-based, FCA-regulated investment banking firm. The company operates with a limited internal IT team and has been expanding while increasing its reliance on technology. In the wake of significant changes, Zeus prioritised aligning its cybersecurity practices with financial services industry standards and wanted an independent third-party evaluation to demonstrate its commitment to secure digital operations.

Zeus Capital faced the challenge of managing its information security with a limited internal IT team. As the company expanded and its reliance on technology grew, it wanted to strengthen its security measures and needed a comprehensive assessment that stayed within budget and adhered to specific requirements. It lacked the expertise and resources to carry out that work internally.

In the wake of significant changes, Zeus prioritised aligning its cybersecurity practices with financial services industry standards. As an FCA-regulated investment bank, it wanted an independent third-party evaluation of its cybersecurity to demonstrate its commitment to secure digital operations and to give its board clarity on regulatory compliance.

Zeus also wanted a partner focused on its actual needs. Some competitors pushed unnecessary services, whereas Zeus was looking for a receptive approach, a transparent methodology and the breadth of capability to support future cyber initiatives as part of a long-term partnership.

Zeus selected Thrive for its extensive expertise in the investment sector and its proven strategic consulting capabilities. Thrive developed a customised cybersecurity framework for Zeus, aligned with the firm's unique business model and risk appetite, and committed to understanding the company's objectives rather than pushing services it did not need.

Thrive conducted a Cybersecurity Risk Assessment, evaluating Zeus's security policies, processes and controls against the globally recognised CIS framework. The assessment gave Zeus a clear understanding of its security posture and identified areas for improvement. Thrive then carried out an autonomous penetration test, a simulated cyber attack on Zeus's systems, to identify potential security gaps so the firm could take proactive measures to address them.

With this knowledge, Zeus remediated its weaknesses and presented a robust security strategy to its board. Thrive's services also enhanced staff awareness of cybersecurity, equipping employees with the knowledge and skills to identify and respond to potential threats. Thrive's expertise, collaborative approach and commitment to ongoing support position the engagement as the beginning of a long-term strategic partnership focused on keeping Zeus ahead of emerging threats.

• Security policies, processes and controls assessed against the CIS framework, giving a clear view of the firm's posture
• Autonomous penetration test identified potential security gaps, which Zeus then remediated
• Board reassured about regulatory compliance and presented with a robust security strategy
• Staff awareness of cybersecurity improved, with employees better equipped to identify and respond to threats
• Effectiveness of pre-existing security measures affirmed while areas for improvement were identified