From Awareness to Concrete Action
Interest in information security began a few years ago, when large-scale cyber incidents at a kitchen manufacturer and Maastricht University, among others, made it clear that cyber threats do not only affect large organizations. That’s when BBA Pumps began to ask itself: How secure are we, and what specific steps do we need to take?
There was a need for:
- Understanding Vulnerabilities
- Specific priorities
- A framework for taking real action
Our Solutions
We needed someone who has the expertise, can provide structure, and applies pressure to ensure that it doesn't remain just a vague commitment.
For OneXillium
The partnership with OneXillium came about through an employee who had previously had a positive experience with OneXillium. That experience immediately inspired confidence to begin the partnership. The decision was subsequently confirmed by the combination of a practical, hands-on approach and strong subject matter expertise.
The Chosen Approach
BBA Pumps launched a penetration test to identify vulnerabilities within the organization. The results of this test formed the basis for a security roadmap with a clear structure and next steps, under the guidance of OneXillium’s CISO as a Service.
Toward Organization-Wide Awareness
The penetration test immediately yielded valuable insights. It revealed vulnerabilities, making it clear where the greatest risks lay. The most significant impact, however, came from applying these findings to the organization:
- Drafting and documenting policies, procedures, and protocols
- Establishing Structures and Standard Documentation
- Active prioritization of vulnerabilities
- Support with Investment Issues
“When you’re bedridden for three days, there’s nothing you can do. That suddenly makes investment decisions a lot easier.”
Marc Neijsen, CFO
At BBA Pumps, security became a recurring topic at the executive level following the establishment of a cybersecurity forum, which includes not only OneXillium’s CISO but also representatives from BBA Pumps’ IT department and CFO.
Security Awareness
A key finding from the penetration test was that employees are one of the biggest vulnerabilities. That is why BBA Pumps has focused on raising awareness, both through OneXillium’s online awareness platform and through in-person sessions.
These physical awareness sessions are specifically designed for production employees. Although they do not work at a desk every day, they still need to be aware of physical security measures, as these are the methods cybercriminals use to try to gain access.
“People are now coming back on their own with questions about phishing methods. That’s when you know the awareness program is alive and making an impact.”
Marc Neijsen, CFO
NIS2 Compliance
Security is no longer a standalone activity but an integral part of business operations, with ongoing attention from senior management, collaboration between IT and the business, and a clear roadmap based on risks.
BBA Pumps is now working closely with OneXillium’s CISO toward the clear goal of achieving NIS2 compliance by the end of 2026.
OneXillium recommends
What BBA Pumps values most is that OneXillium not only provides insight, but also actually helps organizations take action.
- The combination of a penetration test and CISO guidance provides both direction and progress
- Active assistance is provided in setting priorities
- Recommendations are specific and help you make well-informed investment decisions
- This approach ensures that security isn't just a passing concern, but is actually addressed
Conclusion
For BBA Pumps, the penetration test was the starting point for a broader initiative. With the right insights, guidance, and structure, the organization has moved from awareness to concrete action. The result is an organization that is better prepared for cyber threats and is actively working to continuously improve its cybersecurity.
About BBA Pumps
BBA Pumps is an internationally operating family-owned business whose history dates back to 1953. That year, Mr. Bruin started his business in Apeldoorn as a manufacturer of piping systems for water transport. In the 1970s, the company took the next step by beginning to supply pumps. Since then, BBA Pumps has grown into a leading international manufacturer of mobile pumping systems.
Request a no-obligation consultation!
Eigen Haard isn't the only housing authority using our EIM solution, Xtendis. Learn all about it on our housing authority page, or contact us if you'd like to gain even more control over your overall information management.