Man walking in front of wind turbines

SGS: creating a more secure, agile and sustainable infrastructure in the cloud

Inés Rivas Carnero

Inés Rivas Carnero

Azure Integrated Marketing Manager | Western Europe

Read Time, 7 min.

“If you ask anyone at SGS what’s in the DNA of the company, they will all say the same two words: integrity and safety. We want to add a third word to the list: security.”

Frederic Ducret, Global Head of Cloud and IT Infrastructure at SGS is talking about the core qualities that define the world’s largest and most successful auditing, testing, inspection and certification company.

“Since I joined SGS a quarter of a century ago, we have always talked about the critical importance of integrity, because our business relies on the trust that our customers have for SGS,” Ducret continues. “We have zero-tolerance against any deviation from our integrity policy within our network, as it could ruin our reputation if someone does something bad somewhere.

“In the digital age, you need to secure your infrastructure, data and applications to enforce integrity. That’s a big piece of our move to the cloud.”

It is a move that has been ongoing since Ducret’s team presented the case to move the company’s infrastructure from on-premise data centers housed primarily in SGS offices across the globe, to the Azure cloud.

With over 80% of the company’s servers now based in the cloud, the team are well on their way to achieving their ultimate goal of being a cloud-only company. And they are reaping the security benefits that cloud-based solutions like Azure Sentinel are bringing the company.

Unifying the company’s infrastructure in the cloud

Established in Switzerland in 1878, SGS has grown over nearly a century and a half into the industry leader in inspection, verification, testing and certification. With more than 89,000 employees operating from some 2,600 offices and laboratories around the world, SGS has established itself as the global benchmark for quality and integrity.

“We provide analysis of products and substances for our customers,” explains Ducret. “So we could go to a tanker, for example, take a sample of the oil, analyze it and then provide an objective analysis of whether it is compliant with our customers’ requirements.”

Making sure that SGS’s operations are robust is a key priority for Ducret. “We need to make sure our services and applications are always-on,” he says. “Our reputation depends on it, so that is my number 1 priority.”

But in the last couple of years, there has also been an increased focus on introducing some agility to the operations at SGS. “We want to be able to deliver new services to the business, things like IoT and other digital innovations,” he says. “And the cloud strategy we have in place is the foundation of that.”

Another key driver of the company’s cloud strategy is the unification of SGS’s vast infrastructure. “We came from a situation where we had applications distributed in 180 local data centers. And these weren’t state of the art data centers. In some cases, it was just a computer room with a couple of servers and some basic facility services.”

So in 2017, the company took the decision to move to Azure. And it has ushered in a new era for the company. One that is more agile, optimized and secure.

Gaining company-wide security visibility with Azure Sentinel

“When we presented our case for moving to Azure to the top management, security was the big area we focused on,” recalls Ducret, who oversaw cyber security for SGS until the end of 2020. “We showed them that the setup we had with our applications running in 180 different data centers across the world was far from optimized from both a security and a cost perspective.”

“If we wanted to improve the security, it would cost a fortune because in each location we had different technologies. For example, if you wanted to implement web application firewalls across the network, you would have to buy, implement and maintain a specific solution at each location.”

But the security case for the cloud was about more than the bottom line. It was also about increasing visibility across the network. “We have something like 75,000 computers and 85,000 users distributed across more than 140 countries worldwide,” says Ducret. “Of course, from a network perspective, that presents a challenge.

“Before the cloud, at group level, we had limited visibility over the compliance of our local affiliates across the world to the high standards SGS needs to respect. Now with Azure, we have this global visibility and we are able to automate some processes to help our Security Operations Center prevent and detect any anomalies they may have.”

The company has been using various cloud-based security tools, including Azure Sentinel – a cloud-native security information and event management (SIEM) platform that uses built-in AI to help analyze and correlate large volumes of data across enterprises.

The solution allows SGS to define different use cases to detect security threats across its network. “We have defined 12 use cases,” says Ducret. “It allows us to correlate different events and convert them into a security incident, if it is indeed a security incident. We have 75,000 computers and 4,000 servers, so we have many security events every day. It’s not manageable if you don’t have something which automatically analyzes those events and identifies which ones require an action.

“You also get some forensic capabilities with Azure Sentinel,” he adds. “The logs of these incidents are centralized and Sentinel gives us the tools to make some queries and do some forensic analysis of cybersecurity threats.

“And of course, the ease of integration with Azure and the broader Microsoft ecosystem is game changing, especially when it comes to quickly deploying and leveraging a solution in a Microsoft environment.”

Boosting the company’s security posture

One of the most important aspects of having Azure Sentinel is that SGS can reassure their customers that they have comprehensive cybersecurity solutions and practices in place. “Nowadays, customers will ask if we are using an SIEM,” says Ducret. “And it’s important for our security posture score that we can say yes.”

Companies like BitSight and Scorecard can scan the external exposure of companies like SGS and publish reports detailing the effectiveness of the solutions they are using.

“Increasingly, customers looking for testing and certification services like ours will check the external security posture scores of the companies that they are going to work with,” says Ducret. “So for us It’s very important to have a good ranking.”

With Azure Sentinel, the company is increasing that external security posture. But SGS are also working to create their own security ranking internally too.

“We’ve started to create an internal security index to compare affiliates within our network and put them in friendly competition with each other,” says Ducret. “One part of this security index is the completion rate of the security awareness program which we have developed. Each SGS employee has to undertake three per year, and we report the compliance by the completion rate based on location.

“And it is all possible because of how easy the cloud makes it to track this sort of information across our network,” he adds.

Increasing the company’s sustainability credentials

Aside from the security, agility, optimization and cost-saving benefits of the company’s move to the cloud, there are also more profound impacts linked to sustainability.

“A cloud supplier like Microsoft will be much better at optimizing the datacenter’s energy consumption, or consuming blue or green energy, than SGS,” says Ducret. “We cannot achieve the same level of optimization with our internal datacenters – that’s not part of our core business to do that.

“So from this sustainability point of view, there are also considerable benefits of the cloud,” he continues. “And this is important because more and more companies are reporting to an external sustainability index. SGS is very proud to be one of the top companies in the sustainability index. And that’s partially due to the fact that we have been adopters of cloud technology like Microsoft 365 and Azure.

“Now we want to move all our applications to the cloud and embrace not just a cloud-first approach, but become a cloud-only company.”

A big part of that next step will be to introduce Microsoft Teams telephony to the company. “We are already using Teams telephony in our Geneva office and we want to develop a global strategy so that our affiliates can adopt this technology too,” says Ducret.

“So going forward, I think we have a great cloud foundation. It puts us in a strong position to introduce new innovations and strengthen the business with capabilities like IoT technology. It will help us become much more data-driven,” he concludes.

“We have a great footprint for us to take the next step.”

Free eBook: Five questions executives should be asking their security teams

See what questions you need to ask about your organisation’s security measures

Protect your business with Microsoft security and Surface

Discover How IT and business leaders facilitate safety, trust, and collaboration in our modern workforce

Discover more related articles per industry:

Education

Government

  • Ineco

    Ineco improves employee productivity with modern tools and AI

    Struggling with software doesn’t help people get more done. Likewise, if sharing files and collaborating on documents is difficult, productivity takes a hit. Ineco, a Spanish public sector company, understands this, which is why it set out to change the way employees interact with technology and one another. By deploying Microsoft 365 to its over […]

  • a man and two women standing in front of a brick building

    Ajuntament de Lleida: transforming the public sector with a modern, virtual workplace

    “At Ajuntament de Lleida, we think differently. We embrace new technology. And when we see that it could add real value to the work we do, we find a way to make it happen.” Carles GinéSabaté, Systems Implementation Planning Manager at Ajuntament de Lleida, is reflecting on his organization’s open-armed approach to digital transformation and […]

Healthcare

  • A smiling man wearing glasses looking at the camera

    HUS: sharing data securely to make life-saving decisions

    Illnesses and diseases don’t often play fair – an unfortunate truth that was proved by the COVID-19 outbreak in early 2020, heavily hitting healthcare organizations with challenges the world hadn’t seen in a century. Hospitals needed a rapid response to reduce spreading the virus without affecting patient care. A high-pressure situation for any institution, but […]

  • a person preparing food in a kitchen

    Humanitas-DMH: empowering key workers with a secure digital support

    “Our goal is to create an environment where people with mental disabilities can feel safe, secure and happy.” Marcella van Kraaij, Digital Transformation Advisor at Dutch healthcare provider Humanitas-DMH, is discussing her organization’s key objectives – and how the technology her team recently adopted is helping it to achieve them. Every day, the carers and […]

Manufacturing

  • a person sitting at a desk with a laptop on a table

    My people leadership compass in times of gloom

    Microsoft’s Max Tchapeyou offers a very personal viewpoint, citing the six ways he’s found to work more effectively – and positively – with his team.

  • a woman smiling for the camera

    Etex Group: Future-proofing employees to work anywhere across the world

    When COVID-19 spread across Europe in early 2020, businesses entered a new digitally-dependent age. Social distancing measures had asked offices of all shapes and sizes to close their doors, sparking organizations to quickly find other virtual ways for colleagues to meet and collaborate remotely. But for Belgium building material specialist Etex, this was a step they were ready for – having already implemented a cloud-based infrastructure and collaboration tools […]

Retail

Discover more related articles per dossier:

Customer Stories

  • a dirt road in a grassy field

    How ProMobility has discovered lasting benefits of collaborative technology

    Like many businesses across the world, Dutch car auto-leasing company ProMobility has found itself having to adapt in uncertain times: the company’s employees have been working remotely from their homes since the middle of March 2020. But according to Dick Dekker, co-founder and director of ProMobility’s Zaanstad office, north of Amsterdam, Netherlands, there have been […]

Digital Transformation

  • NorthWest Clinics building

    Northwest Clinics: A new era in virtual healthcare

    “I am generally quite modest – I don’t like to brag about my achievements too much. But in this case, I want to make an exception. I want to tell the world what we have done.” For Ed de Myttenaere, CIO at Northwest Clinics hospital (Noordwest Ziekenhuisgroep) in the Netherlands, breaking with tradition is becoming increasingly normal. In responding to the COVID-19 outbreak, his team have implemented a virtual consultation solution that has the potential to redefine […]

Security & Privacy

  • Lady on phone sitting in a taxi

    What’s your company’s cybersecurity score?

    It doesn’t matter if you’re a Fortune 500 company or a local bakery – today, cyberattacks threaten organisations of every size in every sector. And they can be costly to recover from. Attacks often damage brand reputation and cause significant disruption to productivity, which is why it’s so important to protect against cybercriminals. But in […]

Tips