Virgin Media Business: Safeguarding people’s information nationwide.

Client challenge

Virgin Media Business is the largest business-to-business company in the Virgin Group, served by a £13 billion fibre-optic network. Stretching 186,000 km nationwide, our client is able to reach 85% of businesses in the UK, supporting over 30,000 public sector sites and 1,500 corporate customers.

To continue to grow, notably in the public sector with a focus on high levels of information security, Virgin Media Business needed a bespoke employee training programme. The objectives were to gain an in-depth understanding of the ISO 27001 information security management standard internally and, through improved knowledge of implementing the standard’s controls and processes, gain certification. To maximise business opportunities, a fast and effective training solution was needed.

How we helped

We tailored a comprehensive training programme to meet our client’s exact specifications and business needs. This comprised:

• an introduction to ISO 27001 and NGN 224 standards, underpinned by awareness sessions to enhance understanding on why training was necessary
• a two-session pilot scheme to our client’s Business Security Operation Centre, supporting the teams involved with customer information security and responsible for security compliance services daily.

The initial training was then reviewed and adapted, before rolling out the programme across other business units. Over 30 days, we delivered 40 training sessions in locations nationwide to several hundred employees, from administrators to senior managers.

Further awareness, auditor and bespoke training is planned to promote a culture of continuous improvement and ensure that best practice continues to be used.

Benefits and results

• Employees at all levels know the company’s compliance strategy.
• Employees across Virgin Media Business understand, and can implement, a certified management system.
• NGN 224 and ISO 27001 certification has been achieved, maximising business opportunities and supporting compliance with existing and new client requirements.