Strengthening Workplace Security at Société Générale

Managing risk and security at scale

The Digital Workplace Services (DWS) entity at Société Générale is made up of 1,400 people, who manage the digital work environment end-to-end for a scope of 150,000 users.

Maintaining security posture is a top priority for DWS. Every Digital Workplace project must go through a security review by the Operational Security Managers (OSM) team, which handles risk analysis, security tracking across projects, and decisions related to cyber governance.

An embedded cybersecurity expert for risk analysis and security tracking

To strengthen the team responsible for risk analysis and security tracking, Société Générale brought in a cybersecurity expert from Synapsys to:

• Define, review, and track the implementation of IS security processes
• Validate network changes and access requests across various tools
• Conduct risk analyses and track remediation efforts
• Participate in security committees alongside the CISO
• Support security decision-making on issues raised by business lines, including banking, insurance, and real estate
• Manage security incidents with the Antivirus, Endpoint, SOC, and CERT teams

Extending the role to antivirus and EDR management

Building on this risk-management expertise, Société Générale extended the engagement, entrusting the Synapsys expert with antivirus and Endpoint Detection and Response (EDR) management within the Ecosystems (ECO) team.

As lead referent, the expert works on run and engineering missions within the ECO team, taking on new challenges such as assessing the impact of new tool features, running technical analyses and tests, regularly liaising with security vendors, and supporting the rollout of security solutions across the group's entities worldwide.