What challenges were you and your team experiencing prior to working with us – what prompted you to seek a solution? As soon as we started out in our business, we knew we would disrupt the UK betting market, and that we faced some challenges in terms of security and relations as it is very regulated. When we looked deeper into what was required, we established that we needed to be prepared for some sort of audit process, and needed to make some significant changes in not only our product but our processes and approaches to how things should be done.
How did you go about searching for the solution and services? We initially had arranged meetings for companies to visit our office but soon after, the pandemic hit. Another organisation told us it would take 8 months to establish conformity, with a restricted line to provide the audit. Due to the pandemic and having everything pushed back, we understood we only had 2-3 months to get to that place, my colleague found Evalian and they did everything in time, with ease and confidence which showed us how experienced they were.
Please describe the reasons you decided to work with us. After speaking with Evalian, we knew they were focused on our results and our needs. The team didn’t want to upsell or make the process longer.
Did you have any expectations going into the process? We have several processes going on in addition to non-conformance remediation, so we knew we needed a company that could provide us with training materials and an educational process that could help us to meet our expectations. We also hoped that by the time it came round to the next audit, the team would be much more aware. Evalian has surpassed these expectations in a much quicker timeframe than we expected, even now I would say we are much more experienced.
Can you describe the process we took your business through and anything you learnt about your own business through working this way? I worked with our Evalian consultant, Chris, to prepare our ISMS management system infrastructure and approaches. After all that hard work, we finally successfully passed our audit. It wasn’t an easy audit, there were a number of major and minor non-conformances, but we made changes in line with UK licencing, as passing this was an obligation to our business. Although the process felt stressful, Evalian really gave us confidence in what we were doing and reassurance that we had them there for support and advice at every step. After the audit, we were faced with another set of challenges, in which Evalian again, really supported us well.
In terms of Pen Testing – it was a much easier process. We have successfully completed the testing of our systems with Evalian’s pen testing team, and only one minor issue was found. The Copybet technical team is very skilled and efficient and we feel we are prepared for any type of cyber threat. Evalian also provided email phishing testing for our team to build awareness and our team has all passed it successfully.
Were there any challenges you found along the way and how did you feel we or your consultant, helped to support you through that? The process Evalian has taken us through has been smooth. The audit itself felt stressful for us, but only because we understood that if we were to fail it, the commission could take back our licence, and from there in terms of our business, there would be no way back. But Evalian supported us on every level throughout the audit which was conducted over several days – Chris was with us and helped us to solve any issues that arose.
What changes did you make as a result of working with us? Evalian’s vast experience has enabled us to remediate any issues and shown us how to approach them in future with a different outlook and attitude. Our team’s awareness of phishing has improved and we have a deeper understanding of what is required for auditing.
What has been the most significant achievement for your business facilitated by using our services? We are much more confident in the future across our business as a whole. The audit will always be challenging as it’s a fundamental aspect of the nature of the business we are in, but we are more confident in ourselves, our security, our approach and knowing that our standards are effective. As a result of our collaboration with Evalian, we are delighted to have established our whole Information Security Management System from the ground up, reaching a level at which to pass our RTS audit.
What do you hope to achieve in your future working relationship with us? We will continue building on staff security awareness with Evalian’s help. Evalian continues to supply us with training and awareness materials such as posters and scenario emails which has been a huge help in embedding a security culture across the organisation. We hope to branch out to other markets in future and we are confident this is something Evalian will be able to support us with going forward. I would absolutely recommend Evalian to anyone considering similar services.
Click here to learn more about our ISO and RTS consultancy services