ESET Benefits from Hiring a Flexible QA Team and Assessing IT Security Risks
ESET wants to scale its QA capacity and assess information security risks
ESET provides a broad range of security solutions for home and businesses such as anti-malware, endpoint detection and response, mobile device protection, virus scanning and protection and mail security. The nature of our client’s business requires perfect quality and a high level of confidence both in the products and systems they use in their daily operations.
Our client was actively expanding their core product, ESET Smart Security (later renamed to ESET Internet Security) and required additional resources to establish an efficient testing process. Their primary outsourcing drivers were cost efficiency and the chance to scale resources according to their needs quickly.
Also, ESET wanted an extension of their information security capacity to execute their information security framework — to cover staffing issues with an independent information security risk assessment, verify their business continuity plan and recovery ability for their essential business services and systems. The company aimed to mitigate reputational, strategic and financial risks associated with compliance.
Robust QA capacity and infrastructure as well as risk management support
Our QA team reached 30+ test engineers at peak periods. Since 2011, we have provided ESET with all levels of manual testing services for their core product line of cybersecurity solutions intended for home and business use. We test all product configurations across multiple platforms (Linux, Windows, MacOS and mobile). With ELEKS services at hand at the start of every sprint, ESET can balance the testing capacity between products depending on their need and their envisaged release schedule. Additionally, we conducted performance testing for one of ESET’s high-load enterprise platforms to verify that the solution can support enterprise-sized networks.
To enable the efficient testing process of multiple products with vast functionality, we set up a complex infrastructure where we deploy, install and test the products. The infrastructure allows us to minimise the time gap between receiving a new release from ESET and delivering comprehensive test reports.
In 2018, the ELEKS security team conducted an annual information security risk assessment and business continuity testing of ESET’s applications and systems. Our experts conducted a series of interviews and workshops with our client’s asset owners and technical experts. Based on ESET’s mature information security framework, the team provided our client’s Chief Information Security Officer with a detailed report that defined the potential threat vectors and evaluated the probability of threats and vulnerabilities occurring. Moreover, we supported ESET’s BCM program with series of BC exercises testing recovery capabilities and identifying resilience issues.
