Information System security support

OUR CUSTOMER

Industrial company in the field of steel.

OVERVIEW

CHALLENGE

Information Systems are increasingly targeted by cyber-malware. For this reason, the management has decided to pursue and strengthen its IS security approach (management and industrial) by providing support from a consultant with an CISO profile (IS Security Manager).

From the outset, the company chose to have a “global” security approach and not just IT, based on the principles of the ISO 27001 standard.

TEAMWORK APPROACH

Initial assessment of the existing situation, based on ISO 27001.
Formalisation of a safety risk analysis
Drafting of a three-year action plan
Knowledge transfer to the network & security engineer
Regular support (2 to 3 days/month) to sustain the progress of the actions
Assistance in dealing with operational security incidents/actions
Assistance in carrying out consultations for the implementation of services and tools

BENEFITS

Relaunch of a global safety approach, with measurement of progress
Precise definition of the security policy (PGSSI, PSSI), and operational implementation on the IT side
Improvement of the level of technical security
Implementation of a weekly Operational Safety Scoreboard
Raising awareness of the safety culture within the trades
Bringing together IT & EO security approaches to achieve global resilience