Omnistruct Achieves a Six-Fold Increase in its Client Service Capacity With its Partnership with Hyperproof

Detailed Results

Hyperproof streamlines the gap assessment process.

Omnistruct kicks off every new client engagement by conducting an initial security/compliance gap assessment. The results of the assessment are used to build tailored corrective action plans for each client and provide guidance to each client on what they need to do next to align their security program to an industry standard like the NIST Cybersecurity Framework, NIST SP 800-53, or CMMC.

To kick off the security gap assessment, a consultant sends the client a request list detailing all documents (e.g., existing written policies and procedures on security) Ominstruct needs to review to understand the client’s current security posture and the gaps.

Prior to Hyperproof, it was not unusual for a client to take several months to finally send Omnistruct all of the detailed information the consultant needed to form a clear picture of the current state of the client’s cybersecurity stance and the work that needs to be done.

With Hyperproof’s Audit module, Omnistruct consultants can upload a list of requests to the client as soon as a new client engagement starts. A client can respond right away and upload documents back into Hyperproof, linked to a specific item in the request list. Omnistruct consultants can start reviewing clients’ documents right away and see where a client is already compliant, significantly speeding up the gap assessment work.

According to Monroe, one of his clients provided all the information he requested for the NIST Cybersecurity Framework program within five hours of gaining access to Hyperproof.

Guerrero celebrated the success of the Hyperproof implementation by retiring the compliance spreadsheet he inherited from his predecessor.

Omnistruct Consultants Create Corrective Action Plans For Clients in Hyperproof

Prior to Hyperproof, a consultant wrote their findings from the gap assessment and the correction action plan (CAP) in word documents for each client. The CAP is a key deliverable that informs the client what they need to do to get their security posture to the target maturity level and the scope of work for the next phase.

At this time, Omnistruct consultants use Hyperproof’s Risk Register to document each client’s corrective action plans, and they’re conducting walk-throughs with each client in Hyperproof.

“Now that we use Hyperproof to walk our clients through things such as what their risks are and where they need to make additional investments, clients are able to process the information more easily and internalize the concepts. This helps them become more motivated to make progress on their compliance project,” says Monroe.

Managing ongoing compliance work is easier and faster with Hyperproof

Many Omnistruct clients are highly motivated to improve their security and compliance posture, but they have little time or expertise. An Omnistruct consultant partners with each client to help them make steady progress towards a stronger compliance posture on an ongoing basis. During this stage, a consultant works on tasks such as:

Additionally, Omnistruct consultants conduct regular meetings to educate stakeholders on the client’s side on security, compliance, and project management best practices. The ultimate goal is for the client to “graduate” so they are equipped to handle these projects on their own.

Prior to Hyperproof, Omnistruct consultants created project plans and task lists for clients in spreadsheets and sent emails and calendar invites to remind clients to submit proof periodically. They searched through email threads to find documents and manually created reports to update clients on progress.