The Requirement
A major international company in the yachting industry chose N&C to define and implement an information security strategy based on the SASE (secure access service edge) paradigm and the zero-trust model.
The objective was to ensure secure, granular and monitored access to the company’s globally distributed applications for a total perimeter of more than 2,500 users.
The main challenge was to harmonise security and usability, adopting a new access model without impacting operational continuity.
The Solution
N&C worked with the customer in defining the architecture and planning the rollout phases of the solution, favouring a gradual and tested approach.
Main phases of the project:
- Definition of the zero-trust adoption strategy, with mapping of business applications to be protected and identification of users to be included in the perimeter.
- Launch of a pilot phase, including:
– initial implementation of access policies for a small number of users;
– shared testing and troubleshooting sessions to refine the model.
- Gradual extension of the solution to cover the entire target perimeter of 2,500 users worldwide, ensuring scalability and flexibility.
- Configuration of secure, dynamic access policies, based on identity, context and device posture, according to zero-trust principles
The Result
The use of the SASE and zero-trust solution enabled the customer to achieve a higher level of security and control, while still delivering an excellent user experience.
The main benefits:
- Secure access to business applications, wherever users are and from any device.
- Reduction in the attack surface, through centralised policies based on the ‘never trust, always verify’ principle.
- Increased visibility and monitoring, with the ability to track and manage access proactively.
- Strategic value for the organisation’s digital resilience and protection of corporate know-how.
"Security must increasingly be viewed as a necessary, rational and ongoing investment to ensure the resilience and competitiveness of organisations."
Fernando Bagini – Head of Cybersecurity & Security
