
Customer Story
Schneider Electric
To gain more visibility and insights into supply chain risk and to better evaluate vendors’ cybersecurity
Background
With a strong push towards digital transformation, organizations across the world are growing their network of partners and vendors, in search of value-added products and services. In today’s “everything as a service” business environment powered by digital, data, AI, ML and Cybersecurity, Schneider Electric is not an exception. With an ecosystem of ~52,000 suppliers, Schneider Electric’s threat landscape is evolving rapidly, and so is the risk profile of each supplier.
Schneider Electric’s Cybersecurity Strategy and Governance teams (further “team” in the text) led by Mansur Abilkasimov, Deputy Global CISO, Vice President in charge of Cybersecurity strategy, integrated Bitsight’s Third-Party Risk Management technology and advisory capabilities into their company’s wider third-party cyber risk management initiative.
Bitsight Professional Services is so proactive and collaborative that we have decided to integrate them as an extension of our team.
Proactive cyber risk remediation that works alongside your suppliers
When implementing the Third-Party Cyber Risk Management capabilities from Bitsight, Schneider Electric aimed to gain comprehensive and actionable insights into supply chain risks, and get ahead of potential threats targeting their expanding supply chain ecosystem. Monitoring the most critical suppliers with trusted and actionable Security Ratings helps proactively reduce risk, but is not enough if the team is not looking at remediation.
Schneider Electric utilizes Bitsight Professional Services to support their third-party risk remediation needs. Bitsight Professional Services is alerted when critical supplier scores drop, or when pre-determined risk vectors are triggered. With Bitsight, Schneider Electric was able to quickly and effectively manage risks targeting their supply chain without extending resources to train new team members. Bitsight Professional Services were already familiar with Schneider Electric’s program and could proactively identify remediation and reporting opportunities to best work for the team.
“Bitsight Professional Services is so proactive and collaborative that we have decided to integrate them as an extension of our internal team.” continues Mansur. When alerts happen, Schneider Electric is able to flag risks and grant the supplier complimentary access to the Bitsight platform to help them reduce risks efficiently across the value chain.
An encompassing cybersecurity program
Schneider Electric’s cybersecurity management does not end with Third-Party Cyber Risk Management. The team also leverages Bitsight for Security Performance Management (SPM) to monitor the security performance of the company and its non-integrated subsidiaries.
Our vision is to foster trust in the value chain. That is only possible with robust cyber conversations with our partner ecosystem. That is the reason why we use Bitsight technology and advisory capabilities, among other means, as part of those conversations.