May 2021 Summaries

Kennedy Wilson, a global real estate investment company, has optimized its document workflows by leveraging the integration between Box and Adobe Document Cloud, which was introduced in 2020. This integration combines Box's content governance and security with Adobe's document workflow capabilities, allowing Kennedy Wilson's European Finance team to efficiently manage monthly financial packages and reports as part of their month-end accounting close process. The integration has significantly streamlined their workflow by eliminating the need for manual tasks such as emailing, printing, and scanning documents, thus saving time and enhancing compliance, particularly for SOX testing. Box's commitment to integrating with top applications like Adobe ensures that users can collaborate effectively across different platforms, and both companies continue to enhance their partnership to benefit joint customers.

Box has successfully implemented the Hiring Our Heroes program, a 12-week fellowship designed to help transitioning military service members gain corporate experience, thanks to a collaborative effort by the Box Vets Employee Resource Community, the recruiting team, and the sales team. This initiative was introduced to Box by Peter Seidule, a former Army Officer and Hiring Our Heroes graduate, who was inspired by his own positive transition experience. The program's first fellows, Dylan Cox and Shea Mullins, both former Army Officers and West Point graduates, significantly contributed during their fellowship and have since joined Box as Outbound Business Development Representatives. The program emphasizes mentorship and support, with initiatives like the "Box Vets - Mentorship Hour" and the active involvement of veterans like Peter Seidule and Jack Morrow. Participants have praised the welcoming culture at Box, the effectiveness of the training program, and the pride employees have in the company's products and values, likening the adaptability required in the tech industry to their military training.

Projects in the IT sector, including information security, are often managed through a lifecycle model that emphasizes continuous improvement and maintenance. The information security lifecycle is a core framework for security professionals, guiding daily operations and ensuring ongoing progress in a company's security posture. Key steps in this lifecycle include identifying assets to protect, assessing vulnerabilities, designing solutions, implementing changes, protecting systems, and monitoring for new threats. This structured approach helps organizations prioritize IT systems, optimize processes, and adapt to evolving security challenges. By following a systematic lifecycle, companies can enhance their ability to defend against cyberattacks and maintain robust information security.

In today's data-centric environment, implementing an Information Security Management System (ISMS) is crucial for safeguarding an organization's valuable content, including videos, documents, and customer data, from unauthorized access while ensuring accessibility for authorized personnel. An ISMS, guided by the principles of confidentiality, integrity, and availability, involves strategic planning, governance, security controls, and risk management to mitigate threats and maintain operational continuity. Adopting standards like ISO 27001 can help organizations establish robust security measures, while frameworks such as NIST SP 800-53 and PCI DSS offer guidelines tailored to specific industries. Successful implementation of an ISMS requires a company-wide effort involving executives, HR, IT, finance, and customer service teams, emphasizing the importance of compliance and security across departments. The Federal Information Security Management Act (FISMA) provides a risk management framework for government agencies and contractors, ensuring comprehensive security protocols are in place. Utilizing the Plan, Do, Check, Act cycle allows organizations to continuously refine their ISMS to adapt to evolving security challenges. Tools like Box's Intelligent Content Management offer advanced security features, ensuring compliance and protection for content across various industries.