Valorem : IT risk management

Home > Cas Clients > Valorem : IT risk management

Netsystem supported Valorem, starting with a maturity audit based on the ANSSI hygiene guide.

Context & objectives

Valorem is a green energy operator with operations in France, Finland, Greece and Colombia.

The group has more than 300 employees worldwide and manages the development of wind, photovoltaic and hydroelectric projects, from implementation to operation.

In 2022, Valorem wanted to deepen its IT risk management policy. Valorem called on Netsystem to audit its information system, analyse the risks to which the group could be exposed and propose areas for improvement.

Business challenge

Consolidate Valorem’s risk management policy by :

Carrying out a complete inventory of Valorem’s information system and its security practices.
Drawing up a roadmap of security measures to be strengthened and an action plan to be deployed in the event of an incident.

Results

Identification and analysis of IS-related risks: Netsystem’s teams carried out a complete audit of Valorem’s IS based on the ANSSI’s best practice guidelines.
- Inventory of security practices.
- Analysis of the impact of hardware failures on services and prioritisation of risks.
- Positioning of Valorem in relation to other organisations with equivalent challenges.
Roadmap of security principles to be strengthened and prioritisation of risks: Netsystem’s teams assisted Valorem in qualifying and dealing with the risks identified. Some risks were reduced or transferred to more competent service providers, while other, weaker risks were deemed minimal and did not require any specific action.
Better knowledge of the IS and related business issues and deployment of an action plan in the event of an incident.

Key success factors

The ability of Netsystem’s teams to get to grips with the complexity of IS issues thanks to their cross-disciplinary expertise (IS, ICT, cybersecurity, DPO and change management).
The soundness of the approach initiated by Valorem’s IT Department, which Netsystem’s teams supported.