Cegeka Careers Language Why Cegeka Back
Trinity of Innovation

5G, Artificial Intelligence and hybrid cloud: all breakthrough technologies in and by themselves. But their real potential?

Discover the future with us
Icons_Navigation_Cegeka&Society

Cegeka & Society

We develop innovative solutions with a positive impact on the environment, people, and society.

Icons_Navigation_Why Cegeka

Why Cegeka

As a family-owned IT solutions provider, we work In close cooperation with our customers.

Icons_Navigation_Our Story

About Us

Our strong values form the cornerstone of our identity and are at the baseline of our success.

Icons_Navigation_Annual Report

Annual Report

Dive into the details of our growth. Read the full report and learn more about our continued success.

More Cegeka

Our Management

Corporate News

Contact & Locations

Solutions Back
Solutions
Hybrid Cloud

Hybrid Cloud

Explore the added value of cloud adoption for your business

Data solution

Data & AI

Discover our different data solutions to help you become a data-driven company.

Cyber Security & Networking Solution

Cyber Security & Networking

With cyber resilience, your organisation becomes a bit more secure with each day.

Digital Workplace Solution

Digital Workplace

Hybrid workplaces that increases productivity and reduces costs

Applications Solution

Applications

Building the applications to embed growth, innovation and agility

Business Solutions

Business Solutions

Connect your company with Dynamics 365

5G_Citymesh

5G & Mobile Private Networks

Expertise and development experience to bring all the advantages of 5G

Products and platform solutions

Products & Platforms

Software solutions that optimize business processes and drive success.

Services Back
Services
Website_Navigation_IT_Team_Extension_3

IT Team Extension

The best IT professionals to support your projects

Outsourcing Services

Outsourcing & Managed Services

Outsourcing your IT helps you to focus on your strategy.

Website_Navigation_Consultancy

Consultancy

The right skills and attitude to support the IT projects at your office

Website_Navigation_Projects

Projects

Integrating the right digital solutions for your IT project

Industries Back
Industries

Our industry-tailored services are designed to address specific challenges and opportunities across different industries

All industries
Website_Navigation_Agri_and_Food

Agri & Food

Cegeka has a deep understanding of the agri and food ecosystem and the opportunities it creates.

Website_Navigation_Healthcare

Healthcare

By creating leading digital solutions and connecting individuals, processes and systems.​

Energy & Utilities

Energy & Utilities

The arrival of smart electricity grids will allow companies to take care of their own energy management

Finance & Insurance

Finance & Insurance

Take major steps towards cloud computing to increase effectiveness through the use of AI and big data.

Manufacturing

Manufacturing

Production chains are becoming intelligent networks with real-time track-and-trace systems.

Website_Navigation_Mobility

Mobility

Offer citizens, businesses and visitors a better experience by integrating the best digital solutions for mobility.

Insights Back
Knowledge is our backbone

We believe in sharing our insights and expertise with you. Explore our resources and learn more about our products, services and industry trends.

Icons_Navigation_Case Studies

Case Studies

Step into the world of our delighted customers and see how we helped them achieve their goals.

Icons_Navigation_News Items

Corporate News

Stay in the loop with our company news, announcements, awards and events.

Icons_Navigation_Blogs

Blogs

Read our latest articles on topics ranging from technology, innovation, business and beyond.

Icons_Navigation_Webinars

Webinars

Be part of the action with our live or on-demand webinars, where our experts share invaluable knowledge

Icons_Navigation_Ebooks

E-books & Whitepapers

Download our guides and reports on various aspects of technology and business.

Icons_Navigation_Events

Events

Find out where we are going to be next, and register for our upcoming events.

Back
Select language

English

English

German (Germany)

Italian

Dutch (Belgium)

Dutch (The Netherlands)

Romanian

Greek

Swedish

Let’s get in touch
Cegeka Why Cegeka
Trinity of Innovation

5G, Artificial Intelligence and hybrid cloud: all breakthrough technologies in and by themselves. But their real potential?

Discover the future with us
Icons_Navigation_Cegeka&Society

Cegeka & Society

We develop innovative solutions with a positive impact on the environment, people, and society.

Icons_Navigation_Why Cegeka

Why Cegeka

As a family-owned IT solutions provider, we work In close cooperation with our customers.

Icons_Navigation_Our Story

About Us

Our strong values form the cornerstone of our identity and are at the baseline of our success.

Icons_Navigation_Annual Report

Annual Report

Dive into the details of our growth. Read the full report and learn more about our continued success.

More Cegeka

Our Management

Corporate News

Contact & Locations

Solutions
Solutions
Hybrid Cloud

Hybrid Cloud

Explore the added value of cloud adoption for your business

Data solution

Data & AI

Discover our different data solutions to help you become a data-driven company.

Cyber Security & Networking Solution

Cyber Security & Networking

With cyber resilience, your organisation becomes a bit more secure with each day.

Digital Workplace Solution

Digital Workplace

Hybrid workplaces that increases productivity and reduces costs

Applications Solution

Applications

Building the applications to embed growth, innovation and agility

Business Solutions

Business Solutions

Connect your company with Dynamics 365

5G_Citymesh

5G & Mobile Private Networks

Expertise and development experience to bring all the advantages of 5G

Products and platform solutions

Products & Platforms

Software solutions that optimize business processes and drive success.

Services
Services
Website_Navigation_IT_Team_Extension_3

IT Team Extension

The best IT professionals to support your projects

Outsourcing Services

Outsourcing & Managed Services

Outsourcing your IT helps you to focus on your strategy.

Website_Navigation_Consultancy

Consultancy

The right skills and attitude to support the IT projects at your office

Website_Navigation_Projects

Projects

Integrating the right digital solutions for your IT project

Industries
Industries

Our industry-tailored services are designed to address specific challenges and opportunities across different industries

All industries
Website_Navigation_Agri_and_Food

Agri & Food

Cegeka has a deep understanding of the agri and food ecosystem and the opportunities it creates.

Website_Navigation_Healthcare

Healthcare

By creating leading digital solutions and connecting individuals, processes and systems.​

Energy & Utilities

Energy & Utilities

The arrival of smart electricity grids will allow companies to take care of their own energy management

Finance & Insurance

Finance & Insurance

Take major steps towards cloud computing to increase effectiveness through the use of AI and big data.

Manufacturing

Manufacturing

Production chains are becoming intelligent networks with real-time track-and-trace systems.

Website_Navigation_Mobility

Mobility

Offer citizens, businesses and visitors a better experience by integrating the best digital solutions for mobility.

Insights
Knowledge is our backbone

We believe in sharing our insights and expertise with you. Explore our resources and learn more about our products, services and industry trends.

Icons_Navigation_Case Studies

Case Studies

Step into the world of our delighted customers and see how we helped them achieve their goals.

Icons_Navigation_News Items

Corporate News

Stay in the loop with our company news, announcements, awards and events.

Icons_Navigation_Blogs

Blogs

Read our latest articles on topics ranging from technology, innovation, business and beyond.

Icons_Navigation_Webinars

Webinars

Be part of the action with our live or on-demand webinars, where our experts share invaluable knowledge

Icons_Navigation_Ebooks

E-books & Whitepapers

Download our guides and reports on various aspects of technology and business.

Icons_Navigation_Events

Events

Find out where we are going to be next, and register for our upcoming events.

English German (Germany) Italian Dutch (Belgium) Dutch (The Netherlands) Romanian Greek Swedish Careers Let’s get in touch
Home Discover our latest blogs Discover our latest blogs Cybercriminals are increasingly finding their way towards OT and IIoT
Cyber security & Networking
6 minutes reading

Cybercriminals are increasingly finding their way towards OT and IIoT

Fabrice Wynants boasts a solid track record in cyber security, with 25 years of experience in management positions at Ubizen and Verizon. At the start of January 2020, just before the world went into lockdown, he joined Cegeka as the Global Director of Cyber Security & IAM Services. A little over a year after his unusual start, we sat down with him for an interim assessment.

Muriel Reyserhove

Muriel Reyserhove

March 31, 2021

I'll get straight to the point: the COVID crisis erupted immediately after you started working at Cegeka. What has changed since the pandemic?

Fabrice Wynants: “I don't need to explain that working remotely had an immediate impact which is still being felt today. With so many people working from home, we suddenly had an army of unmanaged endpoints that were connected through potentially insecure internet connections, not only to on-premises corporate systems but also to cloud-hosted data and SaaS applications. Not all companies were using VPN technology, and in any case VPN-based access does not provide sufficient protection for every scenario.”

“Many companies were left scrambling, and many of them really had to go through a forced digital transformation. Getting everything organized required a number of actions, and while these were wins, not all of them were quick wins. The first thing they had to do was to provide proper security for both managed and unmanaged endpoints with, for example, patching. Secondly, they had to introduce a strong form of authentication, such as two-factor. And thirdly, all endpoints had to be monitored via Endpoint Detection & Response, so that anomalies were immediately detected and dealt with. It is essential to have the capacity to manage all devices remotely and, if necessary, isolate them. Many organizations were, and still are, unable to do this.”

Fabrice Wynants - Computer security

“In addition, we saw a worldwide increase in social engineering activities, such as phishing. This is a very regrettable development, but it's here to stay. It has been said many times, but it needs repeating: raising awareness among every end user is and remains crucial.”

Haven't we seen enough 'awareness' campaigns by now?

Fabrice Wynants: “Yes, but they are still necessary. Awareness has to be considered from two angles. On the one hand, you have awareness among the managers: to what extent does the C-suite see cyber security as an investment, and not as a cost? We have noticed more and more managers undergoing this change of mentality year after year, not least because there is a growing awareness that any company, large or small, can be impacted and, most importantly, in any sector. Manufacturing companies used to ask me, ‘Why would a hacker target us? There is nothing for them here.' Yet now that cybercriminals have found their way to the shop floor through the ‘gates’ of OT (Operational Technology) and IIoT (Industrial Internet of Things) devices, and can hold an entire company hostage with a targeted ransomware attack, things have changed.”

"Manufacturing companies used to ask me, “Why would a hacker target us? There is nothing for them here.” Yet now that cybercriminals have found their way to the shop floor through OT and IIoT devices, and can hold an entire company hostage with a targeted ransomware attack, things have changed."

 

Fabrice Wynants, Global Director Cybersecurity

“Then of course there is the awareness on the part of the end users. Whichever way you look at it, most incidents can be traced back to human error. The traditional approach of raising awareness with a poster on the wall no longer works. Most people literally look past them. One of the things we do at Cegeka, both internally and for customers, is organizing phishing simulations. Every Cegeka employee also has a report phishing button in their email client. The good thing about this is that you can measure how big the problem is, and where it is located within the company, which allows you to adapt your awareness training accordingly. Many companies already do this, but only once a year, for example, and for all their employees. While you get much better results if you repeat this regularly, and specifically target certain groups.”

Has the pandemic put new pressure on the CISOs?

Fabrice Wynants: “In an IT landscape where the perimeter is always disappearing from view, they already had their hands full (laughing). But the pandemic has certainly made some aspects more challenging. Priorities were redefined, and CISOs had to be able to deal with them quickly and intelligently. I do see the role being upgraded. Now that management boards have realised that critical business processes can be impacted, CISOs are more often given the opportunity to contribute on a strategic level and focus on corporate risks.”

“Today's CISOs are offered a 'seat at the table' much more often than in the past, when it was more of a technical role. But it also creates more pressure: they have to report to the management on a regular basis. We are well aware of this, and our way of working is also geared towards assisting and unburdening the CISO as much as possible.”

"I do see the role of CISO being upgraded. Now that management boards have realised that critical business processes can be impacted, CISOs are more often given the opportunity to contribute on a strategic level and focus on corporate risks."

 

Fabrice Wynants, Global Director Cybersecurity

You mentioned the gates of OT and IIoT. Is that where the real danger lies?

Fabrice Wynants: “Ransomware has wreaked havoc in industrial environments in recent years and will continue to do so. Increasing automation, the introduction of robotics and IoT are causing IT and OT to become increasingly intertwined, allowing malicious code in IT to penetrate OT environments. Cybercriminals know this, and it’s a great opportunity for them to force companies to buy their way out of hostage situations. It's big business.”

Fabrice Wynants - Cyber security

“As a result, cyber security and resilience also have to be implemented on the shop floor, and the same actions – assess, prevent, detect, respond, recover – apply as for IT. With OT, companies also need to map out which connected devices are critical to business processes, what their vulnerabilities are, how we can authenticate them in a network, etc. Unlike in IT, the main goals in OT are the safety of people, and the availability of production processes and machines. This means that it is less obvious and sometimes even impossible to run agent software in an OT environment, for example. That takes some cleverness on our part, but we do have solutions for this in our end-to-end security offering.”

Cegeka's security offering is part of “The Road to Resilience”. Can you tell us more about that?

Fabrice Wynants: “We are developing a roadmap that enables companies to work as safely as possible and ¬– more importantly – to be resilient if something goes wrong, because no solution can offer complete protection. In other words: do everything possible to avoid any incidents, and if they should occur, have the ability to bounce back very quickly. Resilience is, in fact, the sum of all security measures – assessment, prevention, detection, response, recovery – plus a business continuity or recoverability plan. Together they make up a programme that is adjusted on an ongoing basis through continuous improvement.”

"We are developing a roadmap that enables companies to work as safely as possible and - more importantly - to be resilient if something goes wrong, because no solution can offer complete protection. In other words: do everything possible to avoid any incidents, and if they should occur, have the ability to bounce back very quickly."

 

Fabrice Wynants, Global Director Cybersecurity

“In that programme, an important approach is ‘Zero Trust’. In the past, the IT landscape was divided into trusted and untrusted zones, and everything inside the perimeter was usually considered as trusted. So once you were inside, there were no more barriers. ‘Zero trust’ is based on the ‘never trust, always verify’ and the ‘least privilege’ model, where users are only given the minimum amount of rights they need to do their job.”

“We also want to help prepare companies in the event of a breach, and ensure that they can detect and respond quickly to what is often referred to as an ‘Assume Breach’. Not all business processes are equally critical. What we learned from the COVID crisis is that a lot of companies do not really know which processes are most critical for business continuity. That too, is something we can help them with.”

What are Cegeka's priorities for 2021?

Fabrice Wynants: “This year we are focusing in particular on a number of services that we offer in an “as-a-service” model, delivered from our Security Operations Centre (SOC), such as Managed Detection & Response, Endpoint Detection & Response, Privileged Access Management, and others. The fact that we can deliver them as a service from our own SOC makes these services very interesting in terms of cost, manageability and also knowledge. Take PAM solutions for instance: they are usually complex and expensive, yet you can no longer do without them as a company. By purchasing this solution ‘as a service’, it becomes affordable and you no longer have to worry about the complexity.”

“In addition, we are in the process of opening up our entire range of security services to our customer engagement portal, CGK-Horizon. Horizon acts as a ‘single pane of glass’ on top of the customer's security posture, with unified data on firewall policies, vulnerability & compliance information and end-to-end security monitoring for all mobile endpoints, digital workstations, servers, applications, IT/OT and so on. But Horizon is much more than that -it is a unique gateway for every Cegeka customer who purchases a service from us.”

Finally, why Cegeka?

Fabrice Wynants: “When I joined Cegeka in early 2020, one of my responsibilities was to bring the considerable number of activities in the field of security together in one place. What struck me then is how modest we were, and still are, when it comes to positioning ourselves in the market. To some extent, that reflects Cegeka's culture, which is very no-nonsense and pragmatic.”

“What I like about Cegeka – not only when it comes to security - is that we have the capabilities of a corporate enterprise, but we still work very closely to the customer and remain accessible. This ‘best of both worlds’ combination makes us quite unique and allows us to be close to our customers in the field of security when it really matters.”

Muriel Reyserhove

Muriel Reyserhove

More of Muriel Reyserhove articles

Get in touch