Cyber Risk & Security

How to reconcile digital transformation and cyber risk reduction? A vital challenge for large groups.

Their achievements:

• The cyber risk assessment of projects and recommendations to key business and project stakeholders
• A “security counter” to optimise processes, unify security methods and deliverables, maintain IT risk mapping and streamline communication with key stakeholders

Our intervention allowed the client to gain expertise in security, agility, efficiency and visibility.

Have you identified which vulnerabilities will be exploited by your enemies? The steady pace of business transformation requires a strong and constant monitoring of their organisational and technical cyber risks.

A senior auditor and three junior auditors accompanied one of the world’s leading B2B / B2C delivery players on an organisational and technical vulnerability audit campaign targeting several of its sites around the world (Brazil, Hungary, Ireland …).

Their achievements:

• A detailed and complete report on all the technical and organisational tests carried out
• Observations made and associated security recommendations

The quality of our intervention was based on our ability to understand and integrate the key business issues of the group in our executive communications and to combine it with a very strong technical expertise.

How to ensure the protection of secret and personal data in a completely open information system? Securing data is a strategic issue that requires both technological innovation and user empowerment.

Their achievements:

• A classification based on fun tools and an effective methodology for the business departments. This classification integrates the potential impacts in case of data dissemination, modification or loss
• A grid of security solutions adapted to each case

Users are now able to identify their critical data themselves and consider this classification as an asset for the development of their activity.

Are directorates-general well prepared to survive a cyber crisis? The very nature of a computer attack makes it extremely difficult for a crisis management team to identify the root causes of the threat and accurately estimate its impacts.

Their achievements:

• The implementation of a crisis management process involving general managers, business departments and IT teams
• The definition of crisis communication models and response sheets for Crisis Management teams

These actions enabled the client to involve and empower the IT & business teams as well as general managers, to identify concrete areas for improvement, and to promote these activities at top level thanks to a crisis simulation managed with realism and success.

How to ensure cyber security compliance on multi-billion euro programs with an international dimension? The challenge for these critical infrastructure programs lies in the companies' ability to implement a global cyber risk management policy without hampering their commercial development.

Their achievements:

• The audit of more than 120 suppliers
• The control and management of more than 4,000 cyber risks

These long-term achievements have enabled the client to ensure business continuity with regards to cyber attacks and have proven our ability to deliver complex programs with an international dimension as well as our expertise in industrial systems.

How to involve Traders in ensuring the cyber security of their tools and data? Cyber security management programs are often seen as a business constraint, especially in business lines where the use of data is essential.

Their achievements:

• A multi-year cyber security roadmap (covering 50 projects)
• The empowerment of business leaders and IT experts involved in the implementation of secured solutions

The investments have enabled our client to gain the trust of the regulators, and also of its customers and partners.