Establishment of an IT security management system

_220653-02

Establishment of IT- and Cyber-Security Functions for a leading German Pump Manufacturer

By implementing an ISMS, separating IT and OT security, and establishing a SOC, the security posture of a leading industrial company was sustainably enhanced and ISO 27001 recertification was successfully achieved.

Company

Leading multinational supplier of pumps and pump systems for building technology, water management and industry in over 90 countries
Revenue > €1.8b, > 8,400 employees worldwide

Challenge

Review of existing audit reports
Assessment of existing penetration test reports
Brownfield strategy: leveraging and expanding current system infrastructure
Conducting of departmental interviews and current state analysis to evaluate progress status

Goals

Integration of information security functions
Establishment of structured work procedures for ongoing management, enhancement, and renewal of ISO 27001 certification
Deployment of an Information Security Management System (ISMS)

Measures

Separation of IT and OT security roles to support a unified security strategy and roadmap
In-depth analysis of security incidents in IT, OT, and IoT environments to strengthen overall organizational security
Establishment of a Security Operations Center (SOC) for centralized incident detection and response globally

Results

Successful ISO 27001 recertification following ISMS introduction and process optimization
Enhanced security posture and optimized strategies for IT, OT, and IoT systems realized through in-depth analysis
Fully operational SOC enabling faster, more efficient incident management at the global level

These articles might also interest you: