“It was clear that Turnkey's mission was to empower us to be successful with what we learned, not be dependent on them to go back and need more hours.”
— Peggy Wilson, Senior Information Technology Auditor
Texas Mutual needed to replace its cybersecurity assessment tool, which was reaching end-of-support, but were reluctant to invest in another standalone tool that might not deliver all the required functionality. They employed Turnkey to explore alternative tooling and enhance how teams conducted their cybersecurity assessments, addressing specific challenges including:
When Texas Mutual approached Turnkey for guidance on their cybersecurity assessment challenges, Turnkey identified an
opportunity to leverage and expand Texas Mutual's existing Diligent platform investment. This required process reengineering involving several Diligent modules that Texas Mutual hadn't used before and building a scalable foundation for future audit expansion into other industry regulations and assessment types.
Turnkey’s expert team identified a solution that capitalized on a key advantage: the NIST cybersecurity framework
assessment could be integrated into Diligent, eliminating the need for a separate tool and enabling cybersecurity
assessments and NIST requirements to be directly linked within a single platform. By setting the assessment up in this
way, Texas Mutual could leverage and expand its existing investment, avoid additional software licensing costs, and
keep the complexity and risk surface of the technology landscape to a minimum.
Rather than delivering a standard implementation, Turnkey adopted a consultative approach and iterative development
process tailored to Texas Mutual's specific needs. Through detailed requirements gathering sessions and close
collaboration, Turnkey built a prototype and walked the client through line-by-line reviews before handover. This humancentered, flexible approach — complemented by weekly calls, regular touchpoints, and immediate issue resolution
during testing — facilitated trust in the enhanced solution as well as the broader platform capabilities.
End-users were supported by a series of structured training and knowledge transfer sessions, encompassing user
admin, prototype walkthrough, reporting, and bulk uploads. These sessions built rapport, encouraged active learning,
and were backed up by extensive documentation and post-training video tutorials for future reference.
The successful deployment gives Texas Mutual customized workflows and questionnaire modules, mapped to specific NIST CSF 2.0 requirements and delivered directly to stakeholder inboxes. Each question is clearly tagged so that respondents understand the context. The platform also provides the ability to submit additional evidence and selfassess through a preliminary grading system.
Automated coordination and workflow management ensure questionnaires are automatically distributed, without the need for
manual tracking or extensive email chains. Stakeholders can complete questionnaires in the platform or via email at their own pace, accommodating their preferences and reducing resistance. Email responses automatically populate in the platform for data consistency and efficiency.
Custom dashboards track questionnaire progress, control testing, and results, feeding into integrated, real-time reporting without the need for manual logging. Information can be pulled at any time, allowing performance trends to be tracked with upto-date data, with multiple reporting tools available for different stakeholder needs.
The successful implementation and ongoing management of the enhanced Diligent assessment platform have been transformative for Texas Mutual. They now benefit from: