Independent Review of IT and Security

Kristensson was engaged by a semi-governmental organization in the insurance sector to conduct an independent review of their outsourced IT operations. The client had several strategic and regulated services managed by external suppliers, and sought a third-party assessment of how these operations were governed and delivered from an IT and information security perspective.
Our consultants performed a structured review, covering areas such as contractual responsibilities, operational maturity, compliance with security frameworks, and alignment with internal policies. This included document analysis, interviews, and technical review sessions with both the client and its suppliers. We assessed whether critical functions were being delivered in a secure and resilient way, and identified potential gaps in governance, risk management and supplier oversight.
The result was a set of clear, actionable recommendations to improve control, reduce risk, and clarify roles between client and supplier. The review provided valuable assurance to internal stakeholders and served as a foundation for future improvements in third-party management.