softScheck
Building Trust by Delivering Tailored Security Services

Today, with every other enterprise jumping onto the digital transformation bandwagon, it is not until a breach occurs that security becomes a priority for leaders. Envisaging the growing threat in every industry, the CREST accredited company softScheck, offers offensive security services that include security testing, audit, and advisory services to assist organizations in identifying security loopholes. “We have the necessary experience and knowledge to serve a wide range of clients from our exposure to various industries, (such as healthcare, infocomm & media, transport, banking & finance, government), and company sizes, from SMEs to MNCs,” says Henry Tan, CEO at softScheck. The company’s comprehensive security testing approach assists its clients in identifying zero-day vulnerabilities, thereby significantly boosting the security of their products. SoftScheck operates within a High- Performance Culture (HPC), and constant improvement is at the core of the company’s HPC. Consultants at softScheck are encouraged to achieve the best results for its clients consistently and are held to the highest quality standards of work performance. This is evident in the technical outcomes of security projects and the reporting of these results.

Initially founded as an information security research institute in Germany, they intended to share their expert knowledge with other players in the market, which led to the foundation of softScheck GmbH in 2011, and subsequently softScheck APAC in 2015. softScheck’s dedicated team of subject matter experts consists of a young and dynamic talent pool, demonstrating extensive knowledge of IT security and providing IT security consulting services to enterprises. The company has a Talent Development Specialist whose aim is to help its employees develop the necessary talent and skills required in softScheck’s consultancy services. By clearly establishing a direction, employees can work in unison towards a clear focal point – to help softScheck become the best cybersecurity firm – through their capabilities and contributions. Through its expertise in cybersecurity, softScheck has evolved from an initial establishment as a market player in Europe to gain a foothold in Singapore and Indonesia.

The firm was recognized as a selected vendor for IT security consulting and professional services alongside prominent global players such as PwC, KPMG, Deloitte, and Accenture.

softScheck APAC established its presence in Singapore in 2015, intending to provide value to its clients regarding the quality of their work, pricing competitiveness, and vital customer service. Hence, the company focuses on understanding its clients by identifying their project requirements and challenges and flexibly tailors its services to meet client needs. During project engagements, softScheck identifies security requirements beyond compliance obligations and proactively identifies potential challenges. The firm aims to help organizations improve their security posture and ultimately achieve security maturity.

The company identified a growing demand across various enterprises to achieve maturity in their security posture. This is often coupled with the lack of available resources and understanding about cyber-security in general – a pressing gap that needs to be addressed.

As a result, softScheck fills this gap by assisting their clients in meeting their cyber-security needs to strengthen the security posture following industry best practices like CISO as-a-service (CISOaaS). The company provides CISOaaS to midsize businesses and their clients with a comprehensive security strategy to assess and achieve IoT security maturity.

“Customer centricity forms a cornerstone of our culture – our employees are committed to delighting our clients and building long-term relationships based on trust. We form strong partnerships and strive to proactively identify the needs and challenges faced by our valued clients,” says Tan. The difference between softScheck and other cybersecurity firms is that they are flexible in tailoring their services to meet the security needs of their clients and actively seek out ways to achieve the best results for everyone involved consistently. Tan further notes that softScheck can only thrive as a company if its employees succeed individually. softScheck uses an Objective & Key Results (OKR) framework to manage performance to ensure that its employees continuously improve their skill set from quarter to quarter and, ultimately, perform at their best.

The firm assesses its clients’ systems against industryaccepted frameworks as a blueprint for managing risk and reducing vulnerabilities. These frameworks help with the implementation and ongoing management of their clients’ information security controls. One such example is the CSA framework that promotes security. An effective way to protect computer systems against cyber threats is to integrate security into every step of the software development life cycle (SDLC), from initiation to development, to deployment and eventual disposal. By implementing the CSA methodology, softScheck reduce system vulnerabilities by conducting a comprehensive security evaluation at every stage of the SDLC.

The company’s agenda is innovation-driven growth; they innovate to dominate. softScheck’s Innovation DNA is the catalyst that helps the firm grow by adapting to changing needs in the cybersecurity marketplace. Employees at softScheck are creative and agile thinkers who keep abreast of the latest trends in the industry. They are empowered to take on these innovation projects, share their research across various platforms, broaden team understanding and fill in any knowledge gaps, expand the range and depth of their security offerings, and ultimately drive the business forward.