Software team security guidelines, hardening
Engie Global Energy Market
For the Energy Transition Service at Engie, we wrote a security framework and a series of handbooks on handling IT-related topics:
- writing security guidelines
- writing incident response procedures
- education of the customer team about threats and incident response
- automating threat analysis
- new datacenter pre-flight checks
- monthly checkups to ensure guidelines are being followed and lessons are learned from incidents
Our work was then used as a first step towards the team ISO27001 certification