Security
Cyber Security
WSC’s Information Technology department is dedicated to cyber security and business continuity. Over the past five years, the Information Security team has been tasked with improving our security posture and executing yearly strategic security roadmaps, updated annually; by doing so, this maintains and strengthens our company’s ability to protect company and client data. The team conducts an annual comprehensive security assessment in tandem with monthly vulnerability scans and remediates identified issues. Our security information and event management (SIEM) platform, AlienVault, monitored 24/7/365 by ProCircular, is utilized to help improve our detection and prevention of attacks on our company’s equipment year-round.
On a monthly cadence, employees undergo training to spot ‘phishing’ scams and other malicious emails or attacks through our security awareness program. These fraudulent requests are sophisticated and can use known company contacts to lure others into sending funds to illegitimate recipients or compromise confidential data and information. After completing these trainings, employees are randomly tested internally and if the employee fails, they are required to go through additional training and, in some cases meet, with human resources and IT for performance improvement. As scams are ever-changing, training and tips are provided to arm our employees with the knowledge to be a digital Brother’s and Sister’s Keeper and ensure we protect our family of companies and their employees.
Highlights
- Conducted a Tabletop Exercise to Prepare for Any Security Emergency
- Conducted Annual Full Environment Penetration Testing to Ensure Continued Improvement
- Rolled Out BitWarden Password Manager to the WSC’s Subsidiary Companies
- Weekly Trivia During Cyber Security Awareness Month in October
- Made Improvements to Our Security Posture with Our vCISO Project and Extended Through 2025
- Brought our Vulnerability Scans on All Systems and Endpoints In-House with our Rapid7 Tool
In 2024, WSC will continue to implement tools and training for increased
company preparedness and due diligence against increasing cyber security risk.
Cyber Security by the Numbers
67%
CYBER TRAINING
COMPLETION ACROSS
ALL COMPANIES
82
HOURS OF REQUIRED
ANNUAL CYBER
SECURITY TRAINING
3,363
TOTAL HOURS
EXECUTED ON ALL
MONTHLY TRAININGS