Intelligent CISO Issue 21 | Page 51

COVER STORY nd-user z, Information security is vital for operating in a secure environment, and as one of the largest energy companies in the world, Energias de Portugal (EDP) recognises this. It used a BitSight solution to improve its security performance and build confidence among its stakeholders. Paulo Moniz, CISO, EDP, explains how the solution has future-proofed operations. E EDP recognises that information security is a vital part of its strategic objectives and is one of its key business requirements, representing a core commitment at the top management level. As a result, EDP’s information security policy is approved at Board of Director level. The policy establishes information security as a competitive differentiator, which generates confidence among EDP’s stakeholders. Also, EDP recognises that it has a heavy responsibility in | Issue 21 ED P EDP UTILISES BITSIGHT PLATFORM FOR SECURITY PERFORMANCE MANAGEMENT DP is a global company, operating in 16 countries across four continents, specialising in energy generation, transport and distribution of electricity and gas. EDP has 12,000 employees across Europe, United States, Canada, South America and Asia and serves 11 million clients. www.intelligentciso.com CI SO , the societal context, as an operator of critical national infrastructure and manager of large volumes of personal data for clients and employees. As part of the EDP group’s strategic information security vision, it established a three-year security master plan (2018 – 2021) based on its end-to-end security principle consisting of these objectives: • Focus on people: Recognising people as a central element of security, not only as the organisation’s first line of defence but also to create the capabilities to architect and implement the security solution to protect the organisation systems and to build a critical incident response and recover capacity • Compliance: Following external laws and regulations imposed on the relevant sectors and generating trust 51