For financial services organisations, protecting sensitive information is no longer just about keeping systems online. The rise of AI-powered cyber threats, increasingly sophisticated phishing attacks, growing regulatory expectations and expanding third-party risk have changed the cyber security landscape dramatically. Organisations are now expected to continuously assess, strengthen and improve their security posture while maintaining operational efficiency.
For Income Asset Management (IAM), that challenge is especially relevant. The business operates across bonds, syndicated loans and managed discretionary account services, requiring secure handling of sensitive financial data, controlled access to information and confidence that critical systems remain protected as technology and threats continue to evolve.
Navigating an increasingly complex threat landscape
According to Chief Technology Officer Nick May, one of the most significant challenges in recent years has been the impact of artificial intelligence on cyber security.
“The role AI now plays in targeted phishing attacks presents a significant challenge for organisations like IAM. The indicators that once made malicious emails easy to identify are becoming increasingly difficult to detect.”
Beyond phishing attacks, IAM is paying close attention to emerging risks associated with AI, including voice impersonation and deepfake technologies.
As executives increasingly participate in webinars, podcasts and other public-facing content, Nick says organisations must consider how publicly available recordings could potentially be exploited by bad actors.
“We’re beginning to see legitimate concerns around AI-generated impersonation, and I think that’s only going to become more prevalent. At the same time, businesses face growing exposure to third-party and supply chain risks through increasingly complex technology ecosystems.”
A security program designed for continuous improvement
Rather than treating cyber security as a point-in-time project, IAM has adopted an ongoing improvement model.
Working closely with Windstil, the organisation continuously reviews risks, strengthens controls and identifies opportunities to improve security across its Microsoft environment.
Today, Windstil acts as an extension of IAM’s internal technology team, helping manage day-to-day operations while driving ongoing security, governance and risk management initiatives.
Over the course of our partnership, Windstil has helped implement and manage:
- Endpoint security and monitoring capabilities
- Security Operations Centre (SOC) integration and escalation processes
- Role-based access controls
- Data Loss Prevention (DLP) policies
- Compliance management and data governance initiatives
- Email security and filtering controls
- Mobile device management capabilities
- Security awareness and training programs
- Phishing simulation campaigns
- Vulnerability scanning and remediation processes
- Security-focused onboarding and offboarding procedures
Importantly, these initiatives are not delivered in isolation. Security planning remains an active and ongoing process.
“We hold regular strategic reviews focused on security, future priorities and areas for improvement,” Nick says. “The roadmap continues to evolve as new threats, technologies and business requirements emerge.”
Turning security into a business capability
One of the more important outcomes for IAM has been the development of security awareness across the organisation.
Technology controls alone are no longer enough to protect businesses from modern threats. User education, process testing and organisational readiness have become equally important.
To support this, Windstil works with IAM on phishing simulations, security awareness training and incident response exercises designed to test both systems and processes.
“We regularly test how effectively the organisation recognises phishing attempts and also validate response processes through simulated security events,” Nick says. “Preparing people is just as important as deploying technology.”
This combination of technical controls, governance and user education has helped IAM build a more mature and resilient security posture while providing confidence that new risks are being actively assessed and addressed.
The value of a proactive technology partner
While the technology outcomes are important, Nick believes the greatest value comes from the ongoing partnership itself.
“The proactive nature of the relationship is one of the most valuable aspects of working with Windstil,” Nick says. “Security is continuously reviewed, opportunities for improvement are identified and issues are addressed before they become larger problems.”
That proactive approach allows IAM’s internal technology team to focus on supporting the wider business, while maintaining confidence that its technology environment is continuiously being monitored and improved.
“Working with Windstil provides confidence that critical technology and security initiatives are being properly managed. It allows our team to focus on the broader priorities of the business.”
Nick also highlighted the responsiveness and quality of support provided by the Windstil team.
“The responsiveness of the team, their technical expertise and genuine commitment to helping us succeed have consistently stood out throughout our relationship.”
Better positioned for the future
Over the past six years, Income Asset Management has navigated significant business change, evolving product offerings, changing technology requirements and an increasingly complex cybersecurity landscape. Throughout that journey, Windstil has remained a trusted technology partner, helping the organisation strengthen security, improve governance and stay ahead of emerging risks.
Looking ahead, Nick believes that ongoing relationship will remain critical.
“We are unquestionably better positioned today than we would be without the partnership,” Nick says. “Having access to proactive advice, strong support and a clear security roadmap has made a substantial difference to IAM.”
When asked whether he would recommend Windstil to another financial services organisation, his response was clear.
“I would have no hesitation in recommending Windstil. They have consistently demonstrated a proactive approach, strong technical capability and a genuine commitment to our success as a business.”
