The long-term network and information security collaboration between Loihde and FinVector took a new step with the deployment of a CSOC service. FinVector’s growth introduced new information security requirements, and Loihde was chosen as the cyber security development partner. The cooperation revolves around continuously improving and helping each other grow and improve.
Based in Kuopio, FinVector develops and manufactures virus-based gene therapy medicine. During the 2000s, the company has grown into an international company with nearly 500 employees. Loihde has been a part of the company's journey from the very beginning. Initially, the cooperation focused on network solutions and firewall services. Along the way, the collaboration has deepened and new services have been introduced. The most important of these is the Loihde CSOC (Cyber Security Operations Centre).
The cooperation entered a new phase as FinVector grew and their IT environment and information security needs expanded.
"As we grew, we began to develop information security in a more determined manner. We aim for the very top. We compared different CSOC service providers and then decided on Loihde," says Ville Harjulampi, IT Manager at FinVector.
Markus Hagman, Head of IT at FinVector, says that growth offered the option to grow a larger team within the organisation and strengthen information security capabilities that way. However, they soon turned to finding a strong and competent partner.
"It was essential for us to find a partner who understands our technical environment and operating culture. An external CSOC service provider has extensive resources and the opportunity to continuously learn from the experiences of various different organisations and customers. As a result, an internal team cannot compete with an external partner when it comes to the amount of knowledge or the extent of experience," he summarises.
As one team
According to Harjulampi and Hagman, the best thing about the cooperation with Loihde is how smoothly it runs. They find that the cooperation is mundane in a good way.
"It feels like we operate as one team. The experts from Loihde provide us with development suggestions and we make action proposals as well. We constantly push each other and the cooperation keeps developing. There is continuous improvement."
Both Harjulampi and Hagman emphasise how important the cooperation running smoothly was for the decision to extend the CSOC service.
"We have been able to openly discuss our needs and requirements related to information security services, and the CSOC service has been developed further flexibly based on the feedback. This has enabled us to elevate our capabilities in information security solutions to a whole new level," says Hagman.
"Although technology solutions provide a technical basis, consulting also plays an important part in our information security development. The information security consulting service Loihde has provided is excellent and links well with the CSOC service. The cooperation works so smoothly it almost feels like our virtual team is in the same building," Harjulampi adds.
Continuous information security assessment also boosts the benefits of the CSOC service
Monthly meetings on the status of information security and reports tailored to FinVector are key to improving information security.
“Both the continuous information security assessment service as well as the CSOC service have also helped us achieve compliance with laws and regulations,” Hagman adds.
He considers it important that the cooperation model has been refined over several years.
"Just a CSOC service operated as a kind of a disruption management model is not enough. It is important to us to continuously review and develop our operations. This also requires that the customer is ready to invest and has a vision of what they want to achieve and the commitment to do it," Hagman explains.
According to Harjulampi, the company is creating a roadmap on what to achieve and how to develop the organisation’s information security in collaboration with Loihde.
“We have our own in-house Cyber Security Program that we used to start improving information security. Currently, we are already at a very good level.”
Information security development never stops
What will be the next step in the cooperation? When it comes to information security, you can never reach the finish line, but there is always room for improvement.
“One must constantly assess the next development steps,” Harjulampi emphasises.
Petri Huuskonen, Account Manager for Loihde, describes FinVector as a model student in cyber security.
"Our cooperation has matured over the years. The CSOC service, continuous information security consulting and information security assessments are all parts of a whole that support each other."
According to Huuskonen, the Loihde CSOC service is very adaptable to the needs of different customers.
"Our service is scalable and flexible and is not tied to any specific technology. Our principle is to provide the customer with as much information as possible about the different options. Our approach is consultative and impartial in relation to different technologies, and the customer makes the ultimate decision on each technology. Often, during a new contract period, we will also optimise the service some, as our needs and wishes become increasingly clear."
