Information & Cyber Security at Hellmann
In today’s business environment, processes are highly dependent on information technology. We at Hellmann understand information and IT systems as essential assets and vital resources critical to the products and services that we provide to our customers and partners. It is important to secure these assets to ensure a reliable business operation. The foundation of these efforts is a comprehensive information security management system which is monitored by our global team of information security professionals.
Our Security Approach
Our information security management system is backed by the full commitment of our management board, which is documented in our Information Security Policy. It requires every employee to actively participate in an information security culture that helps us to thrive in times of increasing information security threats that companies are facing globally. Our information security portfolio consists of the following capabilities.
PROTECT
-
Definition of global security requirements and policies
-
Security by design, i.e. support in projects
-
SPOC for security relevant topics
-
Training and awareness
-
Maintenance of security relevant certifications, e.g. ISO / IEC 27001
DETECT
-
Monitoring of information security events and incidents
-
Scanning of Hellmann infrastructure and vulnerabilities
-
Internal and external audits
-
Assessment of security status
-
Monitoring of security KPIs
RESPOND
-
Management of cyber security incidents
-
Coordination of cyber triage and forensics
-
Support of disaster recovery
Information Security Policy Framework
We adhere to a comprehensive set of policies that define the requirements that are necessary to sustain the value of the confidentiality, integrity, and availability of our information and services. It further specifies the instruments and methods used to manage (plan, adopt, implement, supervise and improve) the tasks and activities aimed to achieve and comply with information security.
Information Security Awareness
Our information security culture is fostered by multiple awareness measures, e.g., regular mandatory global trainings, simulations, campaigns, advices or target group specific activities. These ensure that every employee is aware of their role and responsibilities in regards to maintaining the security of our information assets in our daily work
Security Incident Management
We proactively and repeatedly search through networks to detect and isolate advanced threats that evade our existing security solutions. Existing security solutions are investigated after an incident or warning occurs, to ensure a similar threat will be avoided in the future.
Information & Cyber Security Certifications
To demonstrate our efforts regarding Cyber Security and the professionality of IT service delivery, Hellmann undergoes several external audits conducted by recognized third party auditors every year. Below, you can find the numerous certifications that we hold in the context of Cyber Security.
