Lactalis: Identifying and Eliminating Non-Compliant Sharing and Access to Reduce Risk

Identifying and Eliminating Non-Compliant Sharing and Access to Reduce Risk

Context:

The Lactalis Group, world leader in dairy products, is committed to continuous innovation to support the digital transformation of its teams on an international scale. With the widespread adoption of Microsoft 365 and the upcoming rollout of Copilot, the group sought to anticipate the impact of AI on data management and security. This initiative is part of Lactalis' broader strategy to prepare for a responsible and controlled use of artificial intelligence, while strengthening a data-aware culture among its employees.

Challenges:

The primary objective was twofold:

• Prepare for AI implementation (Copilot) by ensuring a healthy, secure, and well-governed Microsoft 365 environment, in order to prevent the overexposure of sensitive data.
• Involve end users in data governance by restoring their active role in managing access rights, sharing practices, and the deletion of obsolete information.

Through DETOX Cybermois, Lactalis was able to assess risks related to exposed data, mobilize its teams around a concrete and measurable action, and lay the foundations for sustainable data governance compatible with new AI-driven practices.

 "This collaboration with IDECSI allowed us to actively engage our employees in managing access rights and cybersecurity on a day-to-day basis, thereby strengthening our security culture." 

    Hélène Bernardini,  Group CISO Lactalis