A 24-finding assessment became a costed 12-month roadmap the contractor actually executed
A regional commercial general contractor. Outcome verified
The problem
A regional commercial general contractor with a small, efficient IT team had moved to the cloud and standardized its equipment, but leadership had no objective read on its security, and clients in regulated sectors were writing security obligations into contracts nobody tracked. Core applications were hosted by a parent company outside the team's control, job sites shared one WiFi password with contractors, and personal phones held company email the company could not wipe.
Why it mattered
A phishing test drew a click rate well above what Vizius usually sees on a first engagement, and had a client asked for proof of contractual controls, the company could not have produced it.
What we did
Vizius credited what the team did well, then compressed 24 findings into a 12-month roadmap with rough-order costs and six scoped projects, so leadership could budget rather than debate. Cheap, high-impact fixes came first, and it recommended temporary program oversight instead of a permanent hire.
What changed
The company adopted the roadmap. Within months it had begun the laptop, device-management and WiFi projects and hired Vizius to check its progress, later adding management of personal phones and a SIEM.
- Construction and engineering
- Midsize company
- CIS Controls