Fuchs Petrolub SE improves security posture with Security Aptitude Assessment service
About the Customer
Fuchs Petrolub SE is a global group from Germany and the world’s largest independent lubricant manufacturer with approximately 5,700 employees.
In consequence of several prolific discussions on necessities as well as possibilities of strengthening the SAP security environment, Fuchs Petrolub got increasingly eager to know more about getting an external view on their status quo. The company wanted to identify its strengths and weaknesses and spot possible skill and knowledge gaps within its security governance.
Given a chance to help Fuchs Petrolub getting to know more about their SAP security posture, we proposed to conduct a Security Aptitude Assessment. The service’s objective is to provide a profound report on the different skills, knowledge, and responsibility gaps of the representatives of the three lines of defense (operations, security, audit).
A survey covering different security criteria operates as the centerpiece of this service. Defining the assessment scope together with Fuchs Petrolub gave the customer the chance to always keep an eye on the survey’s execution in the desired manner. This way of conducting the service meant minimal time and effort on the customer side. It was easily integrable into the daily work routine – a significant asset for our clients when order books are full.
After evaluating all results, NO MONKEY put on a follow-up workshop: In this context, we determined the applicability of the defined scope and discussed potential factors for mitigating and amplification.
Conducting the Security Aptitude Assessment enabled Fuchs Petrolub to overview potential skill, knowledge, and responsibility gaps. Therefore, the company gained more transparency – and this determining factor helps prevent miscommunication and security weaknesses within the organization’s IT operations, security, and compliance areas. NO MONKEY empowered Fuchs Petrolub to make their point in understanding their SAP security environment in a different, more in-depth way. As a result, the company acquired the ability to make more efficient decisions on their organization’s security posture.
Potential next steps after a Security Aptitude Assessment
The Security Aptitude Assessment service is an excellent starting point for companies to improve their security posture, i.e., to increase the security capabilities of the team. Going one step further, you need to create a common understanding and build bridges between the three lines of defense. To do so, NO MONKEY offers a core business application security workshop as a structured approach to lower the knowledge asymmetry between the different stakeholders for SAP security.
“We decided to conduct the Security Aptitude Assessment because we wanted to get transparency on our organization’s skills, knowledge, and responsibilities – especially among the different departments IT operations, security, and compliance. Carrying out this approach was very professional and helped us realize where we can improve our SAP Security area.”
Chief Information Security Officer & Manager of Group IT at Fuchs Petrolub SE
Stay Informed With the Latest From NO MONKEY
Subscribe to NO MONKEY Updates to stay informed with the latest security tips, events, Open Trainings Session Calendar, Academy course offerings, Advisory services, and blog articles.