The IT department for a Southern California Indian Nation spanning three counties is responsible for the Cybersecurity of two casinos and multiple truck stops and restaurants. Their cybersecurity policies and practices had plenty of room for improvement. They were undocumented with zero written practices, had a workforce at 25% of industry norms, and had dozens of vulnerabilities, which equated to $1.8M of risk for the Nation.