ETS Security Framework

Software team security guidelines, hardening
Engie Global Energy Market

For the Energy Transition Service at Engie, we wrote a security framework and a series of handbooks on handling IT-related topics:

  • writing security guidelines
  • writing incident response procedures
  • education of the customer team about threats and incident response
  • automating threat analysis
  • new datacenter pre-flight checks
  • monthly checkups to ensure guidelines are being followed and lessons are learned from incidents

Our work was then used as a first step towards the team ISO27001 certification