Case Studies

American Heritage Federal Credit Union

The American Heritage Federal Credit Union traces its roots to 1948, when it began serving employees of the Budd Manufacturing Company. In 1985, the Philadelphia-based credit union assumed its current name to reflect the growth and diversity of its affiliated companies and members. Today, American Heritage is one of the top seven credit unions in Pennsylvania— with over 700 companies, about 85,000 members, and $620 million in assets.

As President/CEO Bruce Foulke explains, the credit union has long had an information security and compliance program in place. To help validate the in-house team’s efforts—while identifying any areas in need of improvement— the credit union recently sought an objective, third-party assessment.  Read more

Coast Capital Savings

With total assets under administration of $11.9 billion, Coast Capital Savings is Canada’s second largest credit union. Serving 380,000 members and with 50 branches located across the Metro Vancouver and Vancouver Island regions of British Columbia, the credit union also has a reputation for excellence in management and service. In fact, in 2007, Coast Capital Savings ranked among Canada’s 50 Best Managed companies for the seventh time, and it continues to be recognized as a Caring Company by Imagine Canada.

As published in its annual report, the credit union’s values include a passion for innovation, spirited teamwork, and a commitment to helping customers, communities, and each other. IT Security Officer Michael Leung, CISSP-ISSMP, CISA, explains that the institution demonstrates those values in its approach to information security—with an innovative, team-based approach that delivers the results the institution requires.   Read more

Complete Healthcare Resources

Founded in 1989 and headquartered in Dresher, Pennsylvania, Complete HealthCare Resources (CHR) provides management and consulting services to long-term care, assisted living, and retirement communities, as well as other providers of senior housing and care. Because of the services it provides and where it is located, CHR must comply with the security and privacy requirements of the Health Insurance Portability and Accountability Act (HIPAA) and with several states’ data breach laws.

Recognizing the importance—and complexity—of compliance, Diller sought an objective assessment of CHR’s existing policies, procedures, and network security components. In addition, he hoped to form a partnership with a third-party security firm that could assess and attest to CHR’s compliance and security efforts on an ongoing basis.  Read more

Synygy, Inc

Headquartered in Chester, Pennsylvania, Synygy, Inc. is the largest provider of solutions for the management of sales compensation plans. Through a unique suite of technology-enabled capabilities, the company helps clients better align, communicate, track, and continually enhance their compensation plans.

And as Vice President of IT Mike Donohue notes, no matter how clients work with Synygy, the security of the software and protection of client data is critical.

That’s why Synygy has invested in a carefully designed and meticulously maintained program for information security. Donohue notes that the company’s security measures cover application, data, server, network, and physical security. Its data center also offers robust security capabilities — including redundant physical systems, multiple Internet connections, application and data center monitoring, backups, an escalation process, and a disaster recovery process.  Read more