Information Security Management System

GEA operates and runs a global Information Security Management System (ISMS). It supports the Executive Board, managers, and all GEA employees in protecting sensitive information.

The security measures put in place by our ISMS play a preventive role to avoid risks in the first place. But we have also defined detective, reactive and corrective measures to respond to successful attacks in a timely manner.

GEA’s ISMS is based on the ISO/IEC 27001 standard, takes on board industry-specific regulations, is continuously further developed by our Chief Information Security Officer, and is reviewed and approved by the Executive Board.

The below section displays how our Information Security System at GEA comes together, including our effective teams, that all contributes to handling our ever-changing security needs. 

Within the Information Security Management System, we operate and maintain two lines of defense against major security risks. In the first line, seven focus areas address risks and threats where they occur. As a second line of defense, the Chief Information Security Officer is responsible for Information Security Governance. He establishes the security levels at GEA by defining the security requirements, risk levels, and standards.

Thanks to GEA’s Information Security Management System we protect information assets through effective, efficient, and modern methods. Our customers and partners benefit from that in many ways:

• Peace of mind – Customers’ and partners’ data is as secure as possible with us since we protect all information assets, including theirs.
• Competitiveness – Is preserved since we protect intellectual property (e.g., solutions tailored to our customers) against theft and espionage.
• Security of supply – Supply of GEA machinery, plants, or process technology is protected since we defend those against sabotage and loss of production.
• Protected infrastructure – The infrastructure of our customers and partners is protected since we defend against attacks targeting their systems through our GEA environment.

Our Information & Cyber Security Department, headed by the Chief Information Security Officer, is in charge of information security governance as part of our Second Line of Defense security function.

To prove that information is handled securely at GEA we have independent, renowned institutions audit and confirm the efficiency and effectiveness of the security measures we take to protect our information and that of our customers.

Here you will find an overview of the certifications we have already achieved.