Dumarey, the automotive excellence group

Overview

The Dumarey Group, formed under this name about a year ago, was born behind the impetus of Guido Dumarey, founder and current chairman, who made his first acquisition in 1983: a small Belgian company specializing in metal punching.
The Group now employs more than 3,000 people in 6 locations in Europe and Asia, with annual sales of about 1 billion euros.

The challenge

Given the amount of information handled, the high number of employees and the high technological profile, the Dumarey Group has chosen to have a special focus on information security issues.
Not only in terms of technology but also in terms of staff training and awareness , which is also a prerequisite for obtaining many of the industry certifications.

After just one year with Cyber Guru, cyber risk is much lower

Paolo Carlo Pomi, Ciso of the Dumarey Group for about a year now, in addition to focusing on technology has bet on employee training, partly because industry certifications require the company to engage in staff training and awareness on cyber security issues.

“I believe that in order to be more resistant to social engineering attacks,” Pomi says, “continuous training is necessary. In my field, the effectiveness of the face-to-face course, done once a year, may solve the compliance problem, but it is not effective enough to manage risk. On this issue, communication often comes across as boring and uninvolving. To protect the company from growing cyber risk, technology must be coupled with a training solution that is quick and easy to deploy and measurably effective, which in is able to lower the risk in a short time, turning employees into the first line of defense against cyber attacks.”
According to Pomi, the strength of a training plan like Cyber Guru’s lies primarily in the continuity of the message. “An ongoing program with training and simulation sections and testing resilience in the face of social engineering attacks. It’s not just phishing, but it’s another line of defense, in addition to technology, that turns every employee into a vigilant guardian of the company’s boundaries.”

In addition, today we are all connected, and often the two worlds, the professional and work world and the personal world, overlap and become confused.

“This, in fact, is another major risk factor that can no longer be ignored,” says Pomi. “No matter how hard we try to keep the two separate, even using corporate devices, the social engineering attack plays heavily on this interpenetration. So since you can’t control employees’ personal devices, the only way to lower the risk is to raise their awareness and attention.”