CASE STUDY:
Multi-Agency Regulatory Audit on Eight-Lane Multi-State Public / Private Toll Bridge Investment
BRIEF:
Public Private Partnership vehicle was used to construct a new bridge to be managed by investors.
ROLE OF MAX2:
The bridge, connecting two states and owned by the local port-authority was classed as “critical infrastructure” and had pending compliance audits from DHS and State Regulators.
With fully outsourced IT management Max2 was engaged to prepare for the audit(s) based on critical controls on both the bridge systems and their IT vendor.
WHAT WAS DELIVERED?
Max² worked closely with the Managed Services Provider (MSP) to navigate potential assessment documentation requests.
Cyber concerns included both traditional cyber risk as well as threat of terrorism and 3rd party toll collectors managing payments were identified.
Risks were valued and ranked allowing for targeted investment.
Reports qualifying and quantifying risk were delivered to the investment fund owners for use in evaluating other portfolios subject to similar regulation.
OUTCOME:
Reduction in cost of more than 30% for remediation actions required for compliance with DHS standards.
INDUSTRIES: