Safeguarding against cyber security threats

Summary

We built a central Information Security function with a global footprint, introduced an Information Security Management System, and delivered training & awareness to foster a resilient security culture.

The Situation

Without a central security function, our customer’s defense against constant cyber-attacks was in danger of being overwhelmed. New digital products and business models meant we needed to act quickly as the risk exposure was increasing daily.

Our Service

• Organizational Design: design and implement a 3 layer of defense operating model, with a new central security function at the core.
• Change Management & Communication: CM foundation incl. change readiness check, stakeholder assessment, change impact analysis, message set, master slide deck, central intranet page, and continuous communication tracking. CM for the overall program as well as dedicated CM for selected projects with high end-user impact. Stakeholder management, including alignment with top management and partners, e.g., data protection & works council.
• Community Building: Definition of Information Security Officer role. Selection, nomination, onboarding, and succession of ISOs. Community engagement including regular meetings (1x1, monthly call). Supporting ISOs in the development and execution of local security plans.
• Employee Enablement: Development & distribution of awareness campaigns (e.g., labeling of documents), fostering of a resilient security culture

The Outcome

• Information Security Framework: Central Information Security team working hand in hand with the community of 20+ local Information Security Officers.
• Governance Model: Clearly defined roles & responsibilities in place for top management, IT, IT Security, Information Security, Data Privacy, and (local) business.
• ISMS Implementation: Security policies created and rolled-out; risk management process in place; ISMS processes in operation.
• Organizational Culture: Strong support from top leadership and the wide range of employees across the world.