Phinance S.A. is the largest independent financial intermediary firm, with a mission to provide clients with outstanding solutions through a team of highly qualified professionals. As the only multi-agency in Poland, it offers a wide range of products from all areas. Phinance’s goal is to ensure financial balance for clients, as well as to build long-lasting relationships.
What did the client expect?
The project involved updating the Information Security Management System (ISMS) documentation. Phinance SA’s primary goal was to find a partner with significant experience in the financial industry who would provide expert support at every stage of the project. PBSG met these requirements. During the meeting, we presented our competencies, team composition, and offered a personalized solution, which convinced the client.
What did we do?
WE CONDUCTED AN ANALYSIS
First, we reviewed and evaluated the existing documentation to ensure it met the requirements set by the Polish Financial Supervision Authority (KNF) regarding the management of information technology areas and the security of the teleinformation environment.
WE SPOKE WITH EMPLOYEES
Conversations with employees are extremely helpful in this type of work. They provide information that is not formalized or documented but can be valuable from the perspective of organizational processes and KNF guidelines.
WE UPDATED THE DOCUMENTATION
The conclusions from the analysis and conversations served as the basis for preparing recommendations for changes. After their approval by the client, we proceeded with the work: we updated the current documentation and prepared new documentation related to IT security.
What were the results?
The project aimed at updating the documentation to meet the requirements of the Polish Financial Supervision Authority (KNF) regarding the management of information technology and cybersecurity in insurance and reinsurance companies. The task involved not only correcting existing documents but also developing new ones. During the work, the project team used the analysis results and KNF guidelines to prepare the required documents, which were then adapted to the client’s needs.
Thanks to the cooperation with PBSG, Phinance SA gained comprehensive and up-to-date ISMS documentation with a focus on consistent procedures that ensure oversight of processes related to information processing.
What did the client gain?
An updated and completed ISMS documentation.
Compliance with the guidelines required by the KNF.
Increased level of information security.
Increased awareness and knowledge of employees regarding information security.