1/ Compliance: aligning standards with international benchmarks
- Follow-up of 8 Golden Rules issued by the parent company (GeoPost) to comply with mandatory measures and minimize the impact of ransomware
- Construction of the PSSI aligned with ISO 27001 & 27002 to enable the certification process in certain markets
- Anticipating the NIS2 directive to prepare for future compliance
- Management of customer requirements and evaluation of suppliers in terms of compliance
Covered objective:
Have benchmarks linked to action plans, with centralized and consistent monitoring .
‍
2/ Risks: a structured and educational analysis
- Identification of major risks
- Definition of business values and supporting assets
- Link between risks, controls, measures, and actions
Covered objective:
Establish clear links between risks, standards, actions, measures, and controls.
" The module really provides visibility in a fairly educational way and makes it easy to manage risk analysis with the various contributors. I think interconnectivity is the strength of this tool. "
Thierry Jeanneret, Group CISO at Asendia
‍
3/ Action plans: an everyday tool
- Global visibility across the entire scope
- Real-time progress tracking
- Automated dashboards and metrics
Covered objective:
Manage effectively by providing the second line of defense with a structured working basis, while assigning tasks to the first line.
‍
4/ Vulnerabilities: procedures integrated into the tool
- Configuration of each vulnerability detected
- Assigning tasks to contributors and generating action plans
- Time savings compared to manual management in Excel
Covered objective:
Optimize resources and enable a small team to effectively cover a growing number of entities.
" We managed to get it adopted and implemented across all the procedures that are part of our policy. "
Thierry Jeanneret, Group CISO at Asendia
‍
5/ Reporting: an up-to-date view for all levels
- Data aggregation and centralization
- Real-time dashboards and reporting
- Audit tracking and simplified presentations for management
Covered objective:
Dashboards tailored to each stakeholder and editable in just a few clicks.
" We saw the difference with Tenacy in terms of audit follow-up. Once we had put in place the action plan for all vulnerability-related actions, we followed up with the management board on a weekly basis. It's this kind of thing that makes follow-up much easier. "
Thierry Jeanneret, Group CISO at Asendia
‍
Centralization and automation for unified governance
{{3-cards}}
Single point of entry
for all cyber governance: compliance, risks, supplier assessments, incidents, reporting.
Automation
controls, workflows, and recurring tasks.
Effective management
a growing number of entities with a limited workforce.
Ultimately, Tenacy became the operational base and sole governance tool for Asendia's cyber team, responding to specific business needs on a daily basis.
.png)
.jpg)
