Investment tripled

As a responsible company, R&M continuously determines how security targets are achieved. A broadly coordinated IT security roadmap has been guiding the way forward for many years and is being continued. R&M’s investments in IT security have tripled since 2019.

Standards for quality management and international regulations are incorporated into the security strategy. The principles of sustainable companies also guide R&M in accordance with the UN Global Compact.

Compliant with ISO 27000

IT security and cyber risk management at R&M already meet the requirements of ISO 27000. R&M is preparing to be certified in accordance with ISO 27001 in the near future with stricter IT security measures.

Access authorizations are checked on an ongoing basis and, if necessary, restricted immediately without compromise. The SharePoint work platform is additionally secured externally and the cybersecurity insurance provides security specialists. This help to ensure that measures are available to prevent potential cyberattacks.

Employees receive ongoing training

R&M continuously trains its employees to deal with phishing attacks so that they can react proactively to dangerous e-mails.

Thanks to technical precautions (firewall updates and patches), discovered security gaps are closed. With regular penetration tests conducted externally, the IT team is looking for further improvements in IT security.

R&M is introducing another security solution: endpoint detection and response. It can proactively detect anomalies on the 1,300 computers in the network. This next level of security removes workstations from the network before attackers can cause damage.

As a result, R&M continues to expand its protection against cyberattacks daily. Customers, partners, and employees can rest assured that their data and information are in good hands at R&M.