Huuskes

Attention to people and organisation

Jurgen: “As an organisation, we deal with a high transaction volume, resulting in large amounts of data and complex data flows. In addition, think of information about customers, employees, recipes, logistics and production processes. This also means that we pay attention to our cybersecurity and information security. In doing so, we not only look at technical solutions, but also at the role people play and of course the associated processes.”

In the search for a cybersecurity company that could guide the organisation, Huuskes came into contact with Tesorion. “Cybersecurity is not something you do once, it is a continuous improvement process to raise the protection of your data and systems to a higher level. You set yourself a goal for where you ultimately want to end up in the field of cybersecurity. To get there, several steps are needed. That is why it is important to us that a cybersecurity service provider truly gets to know us, our systems, our processes and our way of working.”

Security as a business enabler

At Huuskes, a vulnerability scan and a pentest served as the starting point for a structural and continuous process of information security. Within that process, attention is paid to factors such as people and technology. The most important criterion? The measures taken must help move the organisation forward. Information security is therefore shaped from the organisation’s core values. It is not primarily about obtaining a certificate or standard, but about the intrinsic motivation to want to do better as an organisation.

“We started with the low hanging fruit, a vulnerability scan and awareness. We saw the scan as a baseline measurement. After all, in order to define and realise an objective, you first need to know your starting point. When you see cybersecurity as a continuous improvement process, a lot comes at you. You cannot focus on everything at the same time. One of the first things we picked up together with Tesorion’s consultants was creating more awareness among our people. That should not be an obligation, but something that becomes part of the company culture.”

Stronger together

In addition to the human factor, the technology factor naturally also plays a role. Any organisation can become a victim of cybercrime, including Huuskes. To prevent malicious actors from gaining access to company information or systems, we have taken a wide range of measures, including the use of a Managed Detection and Response service.

“A great deal is happening in the world right now, especially in terms of technological developments. These developments, combined with our objective of increasing cyber resilience, led us to choose 24/7 monitoring by the T SOC. There is an increasing need for continuous monitoring of networks and systems, and as an IT team we simply do not have the people for that. In addition, analysing all alerts requires specialist knowledge, especially if action may need to be taken. In that case, bringing in a SOC is a logical next step. The experts at the T SOC know our organisation and understand what drives us. Communication lines are short and when questions arise, a good response follows quickly. They truly work as an extension of our own organisation.”

Conclusion

With a down to earth Twente mindset, carefully considering which developments fit the organisation, Huuskes is making strong progress, both physically and digitally. By making cyber resilience part of the company culture, the organisation increases its cyber maturity and Huuskes is not only ready for today’s threats, but also prepared for those of tomorrow.