- Industry: Environmental management.
- Size: +55,000 employees.
- Area: +16 countries (4 continents).
- Products: Data Protection and Information Security.
- Main regulations: GDPR and ISO 27001.
Urbaser
Transforming management and regulatory compliance
Urbaser
Customer
Urbaser is a world leader in environmental solutions, a global company focused on maximizing the value of the planet’s resources to build a sustainable future. With a presence in more than 16 countries and a network of more than 55,000 employees, the company serves millions of people and manages more than 150 plants, where the circularity of resources is promoted daily.
Urbaser, some figures
- URBASER manages more than 9.5 million tons of municipal solid waste per year and keeps more than 8 million kilometers of streets clean worldwide, an activity for which it employs more than 20,000 people who serve more than 70 million citizens.
- It collects more than 8 million tons of municipal waste per year. In addition, they treat and recover 17.5 million tons of municipal waste and avoid 2.04 million emissions.
- They manage a sanitation network in more than 670 cities around the world. Among them, cities as important as Madrid, Barcelona, Buenos Aires, Paris, London and Santiago de Chile.
Challenges and scope of the project
The project’s challenges included the need to comprehensively manage business continuity plans and centralize relevant information to ensure the availability of critical activities in the event of unavailability, as well as to proactively identify risks and adopt preventive measures.
The project consisted of adapting the software so that it aligned with its specific needs and the advanced methodologies already implemented in the organization in terms of data protection and ISO 27001. The main challenges are presented below:
DATA PROTECTION
- New information structure, the old tool did not cover its current needs.
- Absence of automated processes to address the Risk Analysis and Impact Assessment methodologies of the treatments.
- The biggest challenge was to implement a solid standard of work, adapting it to the experience and vision of the new data protection officer (DPO).
INFORMATION SECURITY
- Ensure the perfect integration of the client’s methodology into the tool to work on its ISMS.
- Enhance the precision and effectiveness of the work model thanks to the automation and optimization of tasks with the software.
- Advanced training in GlobalSuite® for the security team while the solution was being customized for a smooth transition.
“The synergy with GlobalSuite® has optimized our security and data protection management. A transformation that has taken us to the next level.”
Francisco José Rentero Palomares
Corporate Applications Technician Digital & Data Department
Solution
With the support of our team and the GlobalSuite® software, Urbaser was able to overcome complex challenges in data protection and information security and managed to update its advanced work methodologies with a tool that efficiently and systematically supports global standards and current regulations.
DATA PROTECTION
- Adaptation of the Record of Processing Activities, guaranteeing structured and efficient monitoring.
- Comprehensive vision: Conducting TIA (International Transfers) and LIA (Legitimacy Analysis) analyses that, together with the Risk Factor and PIA Analyses, facilitate this perspective.
- Automation and Risks: Implementation of automatic processes for Risk Analysis and Impact Assessment, enhanced by the advanced capabilities of the software.
- Centralization of documentation.
INFORMATION SECURITY
- Surveys: They have allowed them to streamline the process of Evaluating their Risk and Control Matrix automatically
- Adaptation of the Management System to the real operation of the organization.
- Implementation of the GRC Software GlobalSuite® for the automated assessment of risks.
- Document manager and centralized information under the same collaboration environment
Results
- Improvement in efficiency: The implementation of GlobalSuite® has allowed Urbaser to consolidate and improve its regulatory compliance and information security processes, aligning both areas and obtaining more consistent and comparable results.
- Trust and participation: The training and collaborative approach proposed by GSS has not only ensured the correct implementation of the solution, but has also increased the client’s trust in the system, which translates into a more intensive and productive use of the platform.
- Optimization of incident management: The centralization of the management of security incidents and breaches has provided greater organization and control, significantly improving incident response.