Customer Need: Building and testing a robust ISMS with expert guidance
To enhance its information security programme and ensure compliance with legal, regulatory, and customer requirements, TESAT decided to develop and operate an ISO 27001-certified Information Security Management System (ISMS). To create and implement the necessary information security policies, processes, and guidelines for certification, TESAT sought assistance from Airbus Protect.
After achieving ISO 27001 certification, TESAT aimed to conduct a simulation exercise to practise handling a cyber emergency in a “train-as-you-fight” manner with an Incident Response Team. The goal of this exercise was to reduce response times, improve overall responsiveness, and assess compliance with reporting requirements, focusing on identifying and eliminating any obstacles and errors. This included verifying adherence to NIS2 reporting obligations within the 24-hour and 72-hour timeframes.
Our Solution: Beyond ISO 27001 compliance
Airbus Protect supported TESAT in establishing an ISO 27001-compliant ISMS and supported TESAT in the certification process. Airbus Protect provided experienced ISMS security consultants to assist in developing the necessary policies and process descriptions, to accompany the implementation of security measures, as well as during the certification audits.
To best prepare TESAT for a cyber crisis, an Incident Response Emergency Drill was conducted. A fictitious cyber incident scenario was designed to simulate real-life emergency conditions. The exercise focused on responding as though it were an actual crisis, evaluating both the implemented emergency processes and the internal reporting chain. Additionally, the solution was successfully tested for compliance with the new NIS2 reporting obligations.
Customer Benefit: Boosting resilience for enhanced security posture
Airbus Protect played an important role in helping TESAT establish an ISO 27001-compliant ISMS. This support ensured compliance with relevant laws and regulations, addressed security gaps and vulnerabilities, and secured ISO 27001 certification.
Furthermore, Airbus Protect enhanced TESAT’s readiness for cybersecurity incidents through hands-on experience. This included identifying and closing gaps in the reporting chain, accelerating response times, improving coordination within the crisis management team, and reducing potential business downtime during incidents.
As a result of Airbus Protect’s support, TESAT has significantly strengthened its overall security posture and is now well-prepared to effectively counter cyberattacks, leveraging the experience gained to ensure robust crisis management.
A strong customer relationship
