In the face of escalating cyber threats, the accelerating pace of digital transformation and increasingly stringent regulatory requirements, cybersecurity has become a strategic priority for all organisations. For a group such as POST Luxembourg, a critical infrastructure operator active in telecommunications, financial services, logistics and digital services, this reality demands constant vigilance and the ability to adapt continuously.
Building and sharing expertise
“Over the years, we have developed expertise in cybersecurity, initially with the aim of meeting our own needs first and foremost,” says Mohamed Ourdane, Chief Security Officer at POST. “Our teams have developed recognised expertise in a variety of fields, ranging from infrastructure protection to identity management, operational resilience, the cloud and telecommunications security. We have gradually matured, and now wish to put this expertise at the service of our clients.”
Within the POST Group, POST Cyberforce was active on both fronts – internally and externally – helping to strengthen cybersecurity approaches, whether driven by POST’s own needs or those of the market.
An increasingly demanding environment
In recent years, the threat landscape has changed dramatically. Attacks are more frequent, more sophisticated and faster. At the same time, organisations must comply with an increasingly stringent regulatory framework, notably through measures such as NIS2 and DORA.
The gradual convergence between the IT and telecoms sectors further adds to this complexity.
“Cybersecurity can no longer be viewed simply as a protective measure. It is becoming a genuine driver of resilience, designed to ensure the continuity of essential services despite an increasingly uncertain environment,” explains Mohamed Ourdane.
It is no longer simply a matter of planning for crisis scenarios, but of building organisations capable of withstanding, adapting to and continuing to function despite disruptions.
Natural evolution
These developments have led the POST Group to rethink its security arrangements, with a view to making better use of resources and addressing the various challenges more effectively.
From now on, Mohamed Ourdane and his team will focus on internal challenges, the security and resilience of the Group’s infrastructure and operations, as well as various innovation projects related to cybersecurity. For his part, Sébastien Girard, Head of the Cybersecurity Business Line at DEEP, will lead the development of the cybersecurity services offering, to better support market players in addressing their challenges. “This reorganisation was not imposed on us. It is part of a natural evolution and the pursuit of our ambitions,” explains Mohamed Ourdane.
Give every mission the resources to achieve its ambitions
“We needed more resources, and above all skills that were more focused on distinct objectives but working towards a shared ambition. Each of these missions, both internal and external, constitutes a task in its own right,” summarises Sébastien Girard. “The Group’s internal challenges and market needs now require distinct areas of expertise, priorities and paces of action.”
This reorganisation is, however, intended to preserve the dynamics that have made the POST Group so successful in the field of cybersecurity. The two entities will continue to interact, share their challenges and objectives, and strengthen one another. “The aim is not to create a break, but to allow each entity to focus fully on its mission whilst maintaining close ties,” adds Mohamed Ourdane. “It’s a bit like a child who has grown up and is now becoming independent. They remain part of the same family, but are now forging their own path.”
The two organisations remain closely linked, however, reinforcing one another. This is because they still face numerous shared challenges. Discussions on Zero Trust, privileged access management, resilience and post-quantum technologies inform both POST’s internal strategies and the solutions developed by DEEP.
Proven expertise serving the market
Our aim is to promote the full range of skills we have developed over time in order to meet our clients’ needs.
Faced with an ever-changing threat landscape, businesses today are looking for much more than just isolated technological solutions. “It’s about moving beyond simply piling up tools, by offering coherent approaches tailored to the challenges faced by each organisation and capable of meeting new requirements, particularly those relating to European sovereignty,” he continues.
This approach involves support covering the entire security lifecycle: risk assessment, strategy definition, implementation of secure technology infrastructure and platforms, solution integration, monitoring, incident management and continuous improvement. “We support clients in their decision-making, in their technology choices, but also in developing their medium- and long-term security roadmap,” adds Sébastien Girard.
Prepare today for the challenges of tomorrow
Artificial intelligence, the evolution of telecoms infrastructure, issues of digital sovereignty and the advent of post-quantum technologies all call for fresh thinking. “With this in mind, POST is already involved in several research and innovation initiatives carried out in collaboration with industrial, academic and institutional partners,” explains Mohamed Ourdane. “Faced with these new challenges, our ambition is both to strengthen the Group’s resilience and to contribute to that of the ecosystem. The two dimensions are mutually reinforcing and will continue to evolve together.”
Now more than ever, for the POST Group, the cybersecurity of the future will inevitably be built on this ability to combine protection, innovation and cooperation.