Overpromised, Underdelivered: Taking Back Control

Challenge

• • Newly independent insurance firm with no dedicated IT leadership
• • Dependent on a global vendor with no local presence
• • Improper security tool mapping
• • Compliance not part of the solution
• • Paying premiums for minimums

Solution: Partnered with Gotham

• • Uncovered gaps in service delivery, alignment, and value
• • Built a security stack against the CIS Controls Implementation Group 1
• • Deployed tools covering attack surface, third-party risk, and regulatory compliance

Results

• • Costs: Reduced annual costs by ~800k
• • Risk-Based Security: Solutions matched to business needs
• • Better User Experience: Consolidated vendors into one SASE solution for simpler, more scalable access
• • Reduced Attack Surface: Gained visibility into inactive users, devices, and coverage gaps

Key Takeaways

• • Lower Costs: Charged a fair price for relevant services
• • Stronger Security: Ensured 100% coverage of security tooling
• • Increased Compliance: Provided appropriate evidence for SOC 2 & NYS DFS
• • Better Experience: Faster onboarding with seamless access
• • Future-Ready: Built a cloud-first foundation for growth
• • Attack Surface Reduction: Removed inactive users, devices, and cloud resources