Two areas of expertise, one integrated approach
The partnership between Liftinstituut and Sopra Steria brings together two complementary areas of expertise.
Liftinstituut contributes in-depth knowledge of lift safety, inspections, certification and regulatory requirements. Sopra Steria adds specialist cybersecurity expertise, assessing systems from the perspective of a potential attacker.
Following a successful pilot, the two organisations developed a joint approach in which compliance and technical security testing reinforce one another. Rather than focusing solely on individual components, they examine the entire digital environment surrounding a lift system.
“We don't simply plug in a network cable to see what happens,” explains Wouter Doderer, Head of Cyber Offensive & Defensive Security at Sopra Steria. “We examine the entire technology stack, right down to the hardware level. We inspect circuit boards, analyse firmware and investigate whether components contain passwords or vulnerabilities, for example. We then examine applications, network traffic and connected monitoring environments.”
From compliance to cyber resilience
The partnership has enabled Liftinstituut to further develop its services. By combining cybersecurity testing with existing safety inspections, the organisations gain a more comprehensive understanding of the risks associated with connected lift systems. This shifts the focus from simply meeting safety and compliance requirements to actively strengthening cyber resilience.
Would you like to understand the cybersecurity risks within your operational technology (OT) environment and how to address them? Our cybersecurity experts can help you identify vulnerabilities and take practical steps towards a safer, more resilient organisation.
Contact our experts