Kimly Hong worked for a resorts and gaming operator where she was tasked to replace fragmented, property-level security practices with a unified governance baseline. The five year program adopted CIS Controls as the enterprise seecurity framwork, deployed a risk maturity scoring model enabling cross-property comparison, and established executive reporting where none had existed. The engagement produced a ratified enterprise security baseline, a fully operational incident response program, and measurably improved regulatory posture across gaming commission requirements. This case study documents the full framework adoption approach, governance structure, and lessons learned.