During this presentation I will introduce the challenges Exact has in a high moving environment, including our M&A and integration strategy. In this real life experience presentation I will tell about the experience we as Exact had and how we tried to solve them tooling and assessments.
We as Exact have a strategy to acquire multiple (up to 5-7) per year companies. The strategy for most of those is to integrate them into Exact. Even if you do not integrate them, you have the challenge to measure security across all entities and to compare them. We have decide to sent each and every entity of Exact pieces of a questionnaire. By combining them, we have a full insight in the current status of Information Security, but we are also able to compare every acquired company to current entities and pinpoint weaknesses in their measure… or learn from strong controls for other entities.
This tooling / assessments and approach did help us in achieving a far better insight in the security of our entities and helping our board in a holistic overview and direct actionable key items in which we need to improve / invest.