As an industry leader, Certicom’s client demands and requirements can drive many initiatives.  Certicom’s challenge was to ensure that it not only continued to pass industry audit standards but to secure client audits, ensuring additional business.  Certicom encountered such a challenge when a potential client requested a very time sensitive ISO 17999 audit of the organization to guarantee ISO compliance before awarding any contracts.  

Certicom needed assistance to validate the direction of its security program, ensure documented security procedures and capture any security remediation requirements, if it was to capture the client’s business and pass the audit.  Through networking and industry contacts, Certicom approached Eosensa for its experience and skilled knowledge of the Payment Card Industry Data Security Standard (PCI DSS) and the ISO 17999 standard.  


Utilizing its EO-Unified Framework Methodology, Eosensa combined industry best practices and methodologies to address Certicom’s client requirement to allow them to acquire the new business and furnish confidence to their existing program path.  Understanding Certicom’s commitment to consumer protection and data security, Eosensa initiated a PCI review to capture the maturity level within Certicom’s program and to capture potential incongruities against the ISO standard.  

Eosensa and Certicom needed to complete the ISO review in a very short period; a period dictated by the client.  

Upon completion of this engagement, Certicom passed the audit and the contract was awarded.  This has lead to additional business opportunities and an ongoing advisory relationship between Eosensa and Certicom.