Engagements with newly-appointed executives at Fortune-scale organisations. Identifying details withheld by design — only the climb, the weather and the outcome remain.
Ysherpa engagements are confidential by default. Industry, situation and outcome are described here with enough fidelity to be useful — never enough to identify the client. Direct references are available, on request, under mutual agreement.
A newly-appointed Group CISO at a multinational questions the idea that security is only a hygiene factor. The case shows how incidents can prove control value and reshape investment logic.
A large internet-dependent business found far more digital stakeholders than expected. The case shows why Business Information Security starts with the full value chain, not the IT perimeter.
The Chief Security Officer frames security as awareness, visibility, and capability across the company. The case shows why board commitment depends on business impact, not technical detail.
Bank–FinTech partnerships often over-rely on contracts. This case shows why trust, commitment, and relational mechanisms determine whether collaboration creates value.
Digital transformation depends on more than technical hiring. This case shows how leaders can profile, assess, and develop IT managerial skills as a source of durable advantage.
Nikhef needed continuity for secure access to European grid services. The case shows how strong authentication protects research data without blocking collaboration.
Instituut Verbeeten connected security awareness directly to patient safety. The case shows how leadership, measurement, and repeated learning make awareness governable.
Rabo Vastgoed needed to turn a heavily secured e-business architecture into working services. The case shows how translation between business, IT, and outsourcing creates control.
Vos Logistics depended on remote access for fleet operations across Europe. The case shows how proactive authentication support protects continuity and operational trust.
NATO’s MSaaS ecosystem needs more than functional capability. This case shows how governance, enterprise architecture, metadata, identity, and monitoring enable secure data sharing between allies and partners.
Financial firms need security compliance that fits Agile, DevOps, and Cloud delivery. Bobbert, Laros, and Rajagopalan show how principle-based rules become usable practice statements. This research was conducted with the support of FSI representatives from Achmea, ING Bank, ABN AMRO, Aegon, AIA Group, Baloise Insurance, BeFrank, BNP Paribas, Discover Financial Services, Euroclear, Leaseplan, Monuta, Nationale Nederlanden / NN-Group ONVZ, Rabobank, MUFG Bank Europe, Volksbank etc.
NN Group shows how delegation engineering turns GDPR obligations into explicit roles, decisions, and evidence. The case offers a practical route from privacy compliance to AI governance readiness.
Bobbert and Mulder show how Enterprise Engineering turns Business Information Security into measurable assurance. The case moves boards from spreadsheet reporting to governed evidence, dashboards, and operational control.