Consumer & Retail · Brazil · L'Oréal (cosmetics; 88,000 employees; 150 countries; €38bn+ turnover) · IS & Digital
L'Oréal, the world's largest cosmetics company, spanning 150 countries, 36 brands, 88,000 employees and turnover above €38 billion, with 28% of sales from online channels, needed a thorough information-security risk assessment across rapidly shifting IT technologies and an evolving regulatory environment. It also had to coordinate IT and security systems across multiple divisions, hubs and countries to implement its Global Security and Privacy Policies, and to manage risk introduced by a large, diverse network of external vendors and partners.
Amaris ran a two-pronged strategy: internally, coordinating penetration tests and vulnerability scans across L'Oréal's web applications in close, continuous collaboration with its teams; externally, conducting a end-to-end third-party risk assessment of vendors' security protocols to surface vulnerabilities such as outdated software and non-compliant data practices. The team also delivered hands-on security-awareness workshops and a monthly cybersecurity onboarding webinar for new employees, and introduced data-driven metrics and KPIs to give L'Oréal a unified view of its security and privacy landscape.
6 people · senior-led, blended · onshore, nearshore · 48 months · time_and_materials
public
Configure an engagement and see your own indicative band - free, no email required.
Amaris Consulting · Part of Mantu. Figures shown are indicative and illustrative ranges based on the inputs you provide, not a quote. Comparisons refer to typical market ranges for equivalent seniority, not to any specific firm.