Case Study: GUD Holdings Limited achieves consistent cyber metrics across 17 subsidiaries with Cymulate

GUD Establishes Cyber Metrics Across 17 Subsidiaries with Cymulate

GUD Holdings Limited, which operates 17 companies in the automotive aftermarket and water products sectors across Australia and New Zealand, struggled to apply consistent security metrics or continuously validate controls across its subsidiaries with a small cybersecurity team. To solve this, GUD selected Cymulate and implemented Cymulate BAS (Breach and Attack Simulation) to provide an automated, organization-wide way to measure security efficacy.

Using Cymulate BAS, GUD automated continuous assessments, obtained per-control risk scores and immediate threats intelligence, and standardized benchmarks across all 17 businesses. Cymulate enabled GUD to identify underperforming controls (leading to targeted replacements), reduce reliance on manual pen tests, and deliver tangible metrics in monthly leadership reports — giving measurable visibility (individual risk scores and benchmarks) that directs remediation and resource prioritization.

GUD Holdings Limited

Shaun Curtis

Head of Cybersecurity