Case Study: Focus Brands improves GRC and incident response with Onspring

Focus Brands Reduces Findings by 95% with Onspring

Focus Brands, the Atlanta-based food service company behind brands including Auntie Anne’s, Cinnabon, Jamba, Carvel and Schlotzky’s, needed better structure and accountability in its risk and incident management processes. With 14,000 employees across 6,000 restaurants, cafes, ice cream shoppes and bakeries in all 50 states and 60 countries, the company also had to manage PCI DSS compliance, privacy requirements, firewall monitoring and emerging supply chain risks from non-IT vendors.

Focus Brands turned to Onspring’s GRC and business process automation platform to centralize policies, manage controls and audits, automate third-party surveys for more than 300 non-IT vendors, and track KPIs and KRIs tied to security incidents. Using Onspring, the company reported a 95% reduction in findings, a 32% YoY maturity rate increase, and the ability for two GRC staffers to do work that Baird said would otherwise take 10 people, while also improving response times and overall program maturity.

Focus Brands

James Baird

Chief Information Security Officer