Kardex is a global leader in intralogistics solutions in an attractive and growing market. The group offers automated premium products, standardized systems, and life-cycle services that guarantee high availability and low total cost of ownership. With dynamic storage and retrieval machines, Kardex enables a smart entry into automation, offers integrated material flow systems, small parts storage, and automated high-bay warehouses, and acts as a global AutoStore Partner™ with flexible and modular storage and fulfillment solutions. The group employs around 2,500 people in over 30 countries. Kardex Holding AG has been listed on the SIX Swiss Exchange since 1989.
The situation before baseVISION
Mastering the transformation of the security landscape.
The security landscape is evolving rapidly, constantly presenting new challenges and threats. Kardex recognized that security measures cannot be static but must be continuously developed to stay ahead of new threats. Kardex acknowledged the complexity of this ever-changing landscape and the need for a more strategic and comprehensive approach. It became clear that cybersecurity is not just a minor task but should be a major priority. For this reason, Kardex sought support in developing a holistic strategy for effective risk minimization and securing its operations.
The vision
- 24/7 Security Monitoring: Our vision is continuous 24/7 security monitoring. This ensures that potential threats are immediately detected and mitigated to prevent damage before it occurs.
- Development of a detailed security roadmap over several years: We develop a comprehensive security roadmap that spans several years. This roadmap serves as a strategic guide to ensure that all security measures are implemented systematically and sustainably.
- Benefit from focused security expertise: Benefit from our security expertise. Our expert team possesses in-depth knowledge and experience to develop tailored security solutions precisely aligned with your needs.
«Es war eine Freude, mit dem baseVISION-Team zusammenzuarbeiten. Sie haben uns immer wieder neue Einsichten und aktuelles Wissen über Microsoft-Technologien vermittelt, was unsere Zusammenarbeit sowohl lehrreich als auch produktiv gemacht hat. Ihr strukturierter und dennoch agiler Ansatz bei der Entwicklung der Roadmap stellte sicher, dass wir effizient auf unsere Ziele hinarbeiten und uns gleichzeitig an die sich ändernden Bedürfnisse und Herausforderungen anpassen konnten.»
The transformation
A journey to greater resilience
Together with Kardex, we created a holistic roadmap. The overall project started in 2018 with the introduction of key base technologies to enhance security up to integration into our Security Operations Center.
Initial configuration and basic settings
Initial configuration and basic settings
In 2018, it all began with the configuration of Microsoft Defender for Office 365. This initiative marked the beginning of a gradual approach to strengthening cybersecurity.
Access Management and User Empowerment
Access Management and User Empowerment
In 2019, projects around Entra ID Conditional Access and Self-Service Password Reset were initiated.
Launch of the security hardening and cybersecurity initiative
Launch of the security hardening and cybersecurity initiative
In 2020, a dual focus was placed on security hardening and the launch of a cybersecurity initiative aimed at overarching security improvement. A central element of this initiative was a security assessment based on the 18 critical security controls of the CIS, which led to the formulation of a roadmap for security improvement, prioritizing the identified gaps.
Comprehensive deployment of security solutions
Comprehensive deployment of security solutions
The implementation of Microsoft E5 Security licenses in 2021 enabled the deployment of comprehensive security solutions in the Kardex infrastructure, including Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps, Microsoft Sentinel, and Microsoft Entra ID Protection and Password Protection. During this time, these solutions were continuously developed and improved, demonstrating the commitment to an evolving security strategy.
Advanced security projects and initiatives
Advanced security projects and initiatives
The journey continued through the years 2023-2024 with projects such as the Enterprise Access Model, focusing on Active Directory Tiering and Hardening, and the implementation of Microsoft External Attack Surface Management, Entra ID Identity Governance and Lifecycle with Workday integration. The baseVISION SOC Onboarding and the introduction of Microsoft Data Security (Purview) are further examples of the holistic cybersecurity approach.
Aimed at continuous improvement and expansion
Aimed at continuous improvement and expansion
The history of Kardex’s security development continues in 2024 with a focus on continuous security improvement.
«Die CIS-Checks boten einen klaren Rahmen für die Identifizierung und Behandlung von Sicherheitsprioritäten für Kardex und stellten einen zielgerichteten und strategischen Ansatz für die Cybersicherheit sicher.»
Summary
Security is a marathon, not a sprint – The Kardex journey, started in 2018, focuses on improving security beyond one-time projects and emphasized the need for continuous improvements. Together, we developed a vision to overcome the conventional boundaries of cybersecurity and achieve comprehensive protection for Kardex’s digital landscape. A detailed security roadmap was developed, encompassing advanced Microsoft technologies and a comprehensive cybersecurity strategy. The gradual introduction of solutions such as Microsoft Defender and Azure Security up to the baseVISION MXDR Service in 2023 underscores the necessity to adapt to new threats and leverage AI for a more efficient and effective incident response.
Leading companies rely on us.
