In a world where dramatic technological changes and heightened geopolitical dynamics are characteristic, the theme of digital sovereignty has become an imperative necessity for European businesses in a globalised environment. Its meaning can be descriptive, but for Advens, a reputable European technology consulting company, it is all about giving clients the power to stay in control of their data and information systems. This control is especially important when engaging in very critical activities involving sensitive information and communications with government organisations. Advens advocates for the adoption of appropriate European technologies, good data protection practices, and adherence to rigorous regulatory guidelines as the means to achieve this sovereignty. By enabling customers to operate safely and independently within the European arena, Advens equips their ability to withstand geopolitical turmoil and optimise market opportunity with the enhanced cover of trust and confidence derived from enhanced data governance and compliance.
Simultaneously, the cyber environment ever adapting unfolds with new and increasingly sophisticated threats being added every day. Keeping an eye on this dynamic reality, Advens is a proactive and look-ahead one that casts its focus on enforcing strategic policies to prevent and counter probable risks. This is particularly urgent in the backdrop of increasing sophistication of Artificial Intelligence (AI)-based threats which call for a defence equally advanced and dynamic. Advens’ very own Computer Emergency Response Team (CERT) is the focal point of this endeavour, the intelligence and monitoring capability responsible for thoroughly assessing threats and discovering attackers’ evolving tactics, techniques, and procedures (TTPs).
This vital data is not contained within the CERT alone but is actively disseminated to Advens’ operations staff, including their Security Operations Centre (SOC) and Governance, Risk, and Compliance (GRC) teams. This exchange of threat intelligence within the organisation ensures a unified and informed defence strategy. Furthermore, the specific threats posed by AI in the threat landscape have encouraged Advens to strengthen its existing security controls, such as enhanced awareness training, round-the-clock surveillance in the SOC, and proactive research into new security solutions that can effectively counter AI-driven attacks. This was told by Benjamin Leroux, Chief Marketing Officer, Advens.
Advens positions itself as a European leader in cybersecurity, independent and sovereign. In a world increasingly dominated by global tech giants, what does ‘sovereignty’ truly mean for Advens and its clients, and how does it translate into a tangible competitive advantage, particularly for European enterprises?
Sovereignty is a concept that can sometimes be difficult to define simply, but for Advens, it’s straightforward: it’s about enabling our clients to maintain control over their data and information systems, particularly when dealing with clients involved in highly critical activities, such as governmental entities. In practice, this is achieved through the selection of relevant technologies, European, when possible, and through the implementation and adherence to strict procedures for managing data security on a daily basis. Ultimately, for Advens’ clients, this represents a gain in strategic autonomy and facilitates compliance efforts, which should translate into market share gains through the trust generated and independence from geopolitical turbulence.
The cybersecurity landscape is constantly evolving, with new threats emerging daily. How does Advens stay ahead of the curve, and what proactive strategies are you implementing to anticipate and mitigate future risks for your clients, particularly in light of the increasing sophistication of AI-powered attacks?
Our teams are powered by the intelligence/observation work of our CERT (which recently joined FIRST), whose CTI team is responsible for assessing threats and understanding attackers’ tactics, techniques, and procedures (TTPs). This information sharing occurs continuously with our SOC teams to constantly update our clients’ protections, but this sharing also extends to other teams such as GRC. Regarding the specific case of AI, our CERT has indeed noticed the emergence of AI in attackers’ daily operations, and our analysis has led us to strengthen existing measures (awareness training, monitoring with the SOC, etc.) while also seeking new solutions to counter new AI-enhanced attacks.
Beyond technology, cybersecurity is fundamentally a business risk. How does Advens help organisations translate complex technical threats into clear, actionable business insights for decision-makers, enabling them to prioritise investments and manage their overall risk posture effectively?
At Advens, we have had clear since our founding in 2000 that cybersecurity is a business issue, and an essential criterion for a controlled and successful digital transformation. We help our clients, the CISOs, to identify risks and transform them into clear, meaningful scenarios for C-level executives and/or business stakeholders. This is where the choice of words becomes crucial. We also conduct numerous awareness initiatives, particularly aimed at executive committees. We employ various methods to raise their awareness, either through traditional verbal presentations or more innovative approaches such as simulated attacks. Once awareness is established, we develop a roadmap that incorporates criteria related to cost, complexity, and benefits for security and compliance.
Your recent report highlights the growing importance of supply chain security. Given the interconnected nature of modern businesses, how is Advens helping organisations to assess and mitigate risks across their entire ecosystem, and what innovative solutions are you offering to address this complex challenge?
Third-party security is indeed one of the most significant challenges in cybersecurity. Our approach, mainly focused on risk analyses and audits, applies to all types of organisations and technologies. We can, therefore, apply it to a client, their suppliers, or any other involved organisation, whether in a traditional ‘on-premises’ environment or in the Cloud, for IT or OT subjects, for example. To innovate, we rely on technological partners, either to equip the Third-Party Risk Management (TPRM) process or, for instance, to conduct Web and Darkweb monitoring on key entities in a client’s subcontracting chain.
New regulations like NIS2 and DORA are creating new challenges for organisations. How is Advens helping companies comply with these regulations and strengthen their security posture, and what are the broader benefits of improved security?
NIS 2, DORA, and even the Cyber Resilience Act are good regulations and represent a positive development for cybersecurity in Europe. They also add a significant workload for smaller organisations and those with less maturity. However, for others, these regulations will mainly formalise measures already in place, though the required efforts are still substantial. In any case, at Advens, we turn compliance into an opportunity and a lever for development. We help companies clearly understand which regulations apply to them, and we also help them grasp the purpose and spirit of these texts. Furthermore, we conduct numerous ‘multi-framework’ compliance projects by integrating all applicable requirements and promoting the pooling of efforts to reduce costs and avoid “reinventing the wheel,” as they say.
Advens offers a comprehensive suite of cybersecurity services, including threat intelligence, incident response, managed security services, and security consulting. What is the “secret sauce” that differentiates Advens from other cybersecurity providers, and how does this comprehensive approach translate into better outcomes for your clients?
At Advens, we are highly conscious of security and confidentiality challenges… so we don’t reveal the secret sauce! More seriously, I believe we have two secret ingredients. The first is the determination to achieve results and create impact. We do our job to increase the security and protection level of our clients. When we write a security policy or conduct an audit, we make sure that the content of these documents is put into practice and that action plans are successfully carried out.
And our teams actively support clients to achieve this, working hand in hand with them. The other ingredient is commitment. Our teams are committed, just like Advens, which created the Advens For People and Planet Foundation to leverage our economic performance and support projects with societal impact. This commitment is also reflected in our teams, all of whom are deeply involved and dedicated to the success of our clients.
