“Their ISO consultants also helped train our internal auditors. We now manage risks more proactively.”