The Challenge
The management of the large and globally active industrial group (25 production sites, over 10’000 employees) asked for professional support to assess the security risks and provide guidance on how to reduce them. To adequately prevent and prepare for cyber attacks, the customer needed a complete and holistic picture of their IT system and potential security threats.
How we solved it
Arco IT conducted a thorough security assessment to identify cyber risks. This included a comprehensive investigation of the IT systems and the critical business processes.
INVESTIGATION
In-depth interviews were conducted with the company’s key stakeholders in IT and each business unit.
ANALYSIS
We examined the current level of cyber protection in the IT setup. Then, we reviewed the sensitivity of the critical business processes with regards to confidentiality, integrity and availability.
RECOMMENDATION
Actionable recommendations were developed and prioritized in view of the company’s specific needs as per the business process analysis. All of these were integrated into a multi-year plan for improvement of their cyber security.
RESULTS:
- The company received a clear picture of the main threats and their impact in terms of revenue, legal consequences, reputation, etc.
- The six highest risks were identified, along with their recommendations including short-, medium- and long-term improvements.
- The recommended measures and costs were identified and laid out for each period of the five-year plan.
