Unmanaged cyber exposure
Weaknesses across systems, identities and configurations are known in general but not measured.
FINTECH ROADMAP · STEP 01 SOLUTION
CHERUBIM
Guard What Moves Business
Cybersecurity, IT Governance and IT Administration implementation that improves security posture and IT strategic alignment.
Discuss CHERUBIM
What it is
CHERUBIM is a Cybersecurity, IT Governance and IT Administration implementation that improves security posture and IT strategic alignment.
Who it’s for
Financial institutions that need stronger security, clearer governance and consistent day-to-day IT administration.
The problems it addresses
Where the friction actually sits
Inconsistent controls and policies
Policy exists on paper while practice differs by team, system and site.
Unclear IT accountability
Ownership of systems, decisions and risk is spread thin, so change stalls or bypasses review.
Audit and regulatory gaps
Evidence is assembled under pressure each time a review or audit arrives.
HOW IT HELPS
What CHERUBIM changes in practice
Risk assessed and reduced
Assessments rank real exposure, and remediation is tracked to closure and re-tested.
Governance formalized
Frameworks, policies, roles and decision rights documented so change is safe to make.
Controls prepared for review
Controls, records and reporting maintained continuously rather than rebuilt for each audit.
Administration standardized
Microsoft 365, Entra, Intune, Azure and Purview administered to one consistent standard.
Capabilities
Cybersecurity
Cybersecurity Risk Assessments
Exposure measured and ranked by risk to operations and members.
Security Audits & Compliance Assessments
Practice tested against the standards the institution answers to.
Microsoft 365 Security Hardening
Tenant, identity and mail configuration brought to a defensible baseline.
Network Security Assessments
Segmentation, perimeter and internal paths examined.
Endpoint Security & Hardening
Workstations, servers and mobile devices protected consistently.
Cloud Security Assessments
Cloud configuration, access and data exposure reviewed.
Security Policies & Procedures
Written rules staff can actually follow day to day.
Vulnerability Management
Findings tracked, remediated and re-tested on a cycle.
Security Awareness Training
Staff prepared for the attacks aimed at people.
Incident Response & Security Monitoring Setup
Detection, escalation and response readiness in place.
Capabilities
IT Governance
IT Governance Assessment
How technology is decided, funded and run today.
IT Governance Framework Implementation
A governance model adopted and put into practice.
IT Risk Management
Technology risk identified, owned and reviewed.
IT Policies & Procedures
Decision rights and standards documented.
IT Controls Assessment
Controls tested for design and operation.
IT Compliance & Regulatory Readiness
Obligations mapped to controls and evidence.
IT Performance Management
Service and delivery measured against expectations.
IT Audit Readiness
Evidence maintained continuously, not assembled late.
IT Service Management Governance
Requests, changes and incidents governed end to end.
IT Governance Maturity Assessment
Progress measured so improvement is visible.
Capabilities
IT Administration
Microsoft 365 Admin Center
Tenant, licensing and service administration.
Microsoft Entra Admin Center
Identity, access and conditional access management.
Microsoft Intune Admin Center
Device enrolment, policy and application control.
Microsoft Defender Portal
Threat protection configured and monitored.
Exchange Admin Center
Mail flow, protection and mailbox governance.
SharePoint Admin Center
Document estate, sharing and retention settings.
Teams Admin Center
Collaboration, meeting and voice policy administration.
Microsoft Purview Portal
Data classification, retention and compliance controls.
Azure Portal
Cloud subscriptions, resources and access administered.
Power Platform Admin Center
Low-code environments governed rather than left open.
WHAT THE ENGAGEMENT COVERS
- Assessment of current security posture, governance and administration
- Prioritised findings with a remediation plan
- Policy, roles and decision rights documented
- Roadmap, checkpoints and re-testing
Built for financial institutions strengthening security, governance and administration.
More from RLG