FM Logistic provides its international customers with complete logistics solutions that cover everything from warehousing and handling, to transport and distribution, co-packing and co-manufacturing, and supply chain optimization. Operating in 14 countries including France, Russia, Poland, India, Vietnam, Brazil, and China, FM Logistic supports its clients by offering specialized services across a number of markets including consumer goods, retail, cosmetics, and health.

“We are in the process of transforming all our tools and integrating new solutions to be able to work faster and more efficiently. Two main IT priorities are mobility and openness, in terms of working from anywhere and being able to interact with other information systems.”

– Communication Manager, FM Logistic

As a business that has existed since 1967 and in 2018 achieved a turnover of €1.178 billion with 9.5% annual growth, FM Logistic is always looking to help secure the company’s position within an evolving sector. To better serve its customers, FM Logistic decided to launch an innovation project in 2017 to transform the internal digital tools of the company and replace its intranet, email, and productivity software. The company looked for an integrated solution that would enable more collaborative ways of working and bring its international operations closer together. The company found that implementing G Suite and LumApps social intranet was the perfect combination.

“We are in the process of transforming all our tools and integrating new solutions to be able to work faster and more efficiently,” says the Communication Manager at FM Logistic. “Two main IT priorities are mobility and openness, in terms of working from anywhere and being able to interact with other information systems.”

A global transformation

For large international companies with global operations, implementing a single integrated solution to enable collaboration across regions while respecting regional variations can be a real challenge.

“We have 26,000 employees spread across a broad geography, with a variation in cultures and technological maturity. There was an aspiration to work in collaboration, but the necessary tools were not in place,” says FM Logistic’s Communication Manager. FM Logistic looked for a solution to enable new, more collaborative work practices, which were flexible in terms of usage and that, most importantly, would work as part of an integrated solution.

To do that, FM Logistic worked with Google Partner Devoteam G Cloud to implement G Suite alongside the LumApps intranet portal. It took six months to complete the migration of 7,000 accounts, with employees accessing the Business or Basic G Suite edition according to their needs. “Before, with our physical infrastructure we found ourselves buying additional hard drives as we ran out of storage,” says the Technical Project Manager at FM Logistic. “That’s no longer a problem, and we can tailor access depending on whether or not employees need unlimited storage .”

“It’s a real advantage to be able to access your account from any device and work from anywhere. Hangouts Meet has been really transformational in that respect: it has reduced the need for travel significantly, even in the few months we’ve been using it so far.”

– Communication Manager, FM Logistic

“We followed Google’s G Suite migration advice and had early adopter ambassadors in every country. By the time we got around to the final country, very little input was needed as they were ready to go!” says the Technical Project Manager. “Many of them were already familiar with the product, so it was very intuitive. Our feedback surveys gave a satisfaction rating of almost 4.5 out of 5 in relation to the transition. We also had significant executive support, with two members of the executive committee on the steering board. That really helped the project to move quickly.”

As a result, employees were quick to understand the benefits of the new system. “It’s a real advantage to be able to access your account from any device and work from anywhere. That was clear from the start,” says the Communication Manager. “Hangouts Meet has been really transformational in that respect: it has reduced the need for travel significantly, even in the few months we’ve been using it so far.”

LumApps: a fully-integrated enterprise hub

One of FM Logistic’s main reasons for choosing G Suite was the seamless integration with LumApps’ intranet portal. LumApps adds value to G Suite, thereby boosting and sustaining employee adoption. FM Logistic chose LumApps to create a hub for its enterprise, where everything is centralized from internal communications to business apps.

“We didn’t want a patchwork of solutions, we needed a platform that worked as an integral whole,” says the Technical Project Manager. “With LumApps, employees access the intranet using their Google authentication and can access all their G Suite tools through the intranet. Moreover, LumApps is Google native, so the integration is seamless and we know that it will evolve to accommodate any changes that might take place.”

“The main advantages we see are communication and knowledge sharing,” says the Communication Manager. “With LumApps, all 26,000 of our employees are now able to access the portal in their own language and access local news.”

For the next step, FM Logistic is considering integrating social communities so that employees can express themselves and be more engaged in the corporate culture.

Supporting digital maturity

Thanks to Drive, employees can now work from wherever they are, and are able to work more efficiently and more collaboratively. “From an administrative point of view, users can benefit from automatic updates, so there is less pressure on the IT department,” says the Technical Project Manager. “And we’re seeing many innovative uses of the tools to work in more efficient ways: many services have gone paperless with Forms, so less time is wasted; commercial agents are using Drive to work together on tenders simultaneously; and with Sheets, tasks are automatically sent from the team manager’s file to employee’s Calendar.”

“G Suite and LumApps are the first step of our digital transformation, in terms of collaboration and moving into the cloud. We have real confidence in our partners LumApps and Google, and we’re investing in those relationships for the long-term benefit of the company.”

– Communication Manager, FM Logistic

Now, FM Logistic wants to further support its employees in exploring all the tools G Suite has to offer. “We are embarking on a second phase to give our employees the skills they need for advanced uses of Docs, Sheets, and Forms,” says the Communication Manager. “It’s a learning curve, but it’s key to our goal of transforming our everyday processes.”

“G Suite and LumApps are the first step of our digital transformation, in terms of collaboration and moving into the cloud. We have real confidence in our partners LumApps and Google, and we’re investing in those relationships for the long-term benefit of the company.”

I’m excited to share our first Cloud CISO Perspectives post of 2022. It’s already shaping up to be an eventful year for our industry and we’re only in month one. There’s a lot to recap in this post, including the U.S. government’s recent efforts to address critical security issues, like open source software security and zero trust architectures. We’ve also released new resources from our Google Cybersecurity Action Team like the Cloud Security Megatrends and the Boards of Directors whitepaper on cloud risk governance. 

Cloud Security Megatrends 

We’re often asked if the cloud is more secure than on-prem (and why) so we shared our answer in a recent blog post. At Google Cloud, security by design is our priority. We’ve long adopted zero-trust principles for our baseline security architectures and built a global network that relies on defense in depth layers to protect against configuration errors and attacks. But security is always evolving and that is why we also take advantage of the following megatrends:

1. Economy of scale: Decreasing the marginal cost of security raises the baseline level of security. 
2. Shared fate: A flywheel of increasing trust drives more transition to the cloud, which compels even higher security and even more skin-in-the-game from the cloud provider.
3. Healthy competition: The race by deep-pocketed cloud providers to create and implement leading security technologies is the tip of the spear of innovation. 
4. Cloud as the digital immune system: Every security update the cloud gives the customer is informed by some threat, vulnerability, or new attack technique often identified by someone else’s experience. Enterprise IT leaders use this accelerating feedback loop to get better protection.
5. Software-defined infrastructure: Cloud is software defined, so it can be dynamically configured without customers having to manage hardware placement or cope with administrative toil. From a security standpoint, that means specifying security policies as code, and continuously monitoring their effectiveness.
6. Increasing deployment velocity: Because of cloud’s vast scale, providers have had to automate software deployments and updates, usually with automated continuous integration/continuous deployment (CI/CD) systems. That same automation delivers security enhancements, resulting in more frequent security updates.
7. Simplicity: Cloud becomes an abstraction-generating machine for identifying, creating and deploying simpler default modes of operating securely and autonomically. 
8. Sovereignty meets sustainability: The cloud’s global scale and ability to operate in localized and distributed ways creates three pillars of sovereignty. This global scale can also be leveraged to improve energy efficiency.

If you’re an IT decision maker, pay attention to these megatrends that will continue to drive and reinforce cloud security and will outpace the security of on-prem infrastructure well into the future. 

U.S. Federal government cybersecurity momentum 

• Open source software security: Earlier this month, Google participated in the White House Summit on open source software security. The meeting came at a critical time for the industry following December’s Log4j vulnerabilities and was both a recognition of the challenge and an important first step towards addressing it. The open source software ecosystem is not homogenous, despite the fact that the industry often thinks of or treats it this way. Some of it, like Linux, is highly curated, while other critical software is supported through diffuse communities including technology companies and other stakeholders. There is also a long tail of many other critical projects driven by a dedicated community of maintainers around the world, including Googlers. In light of this reality, we welcomed the chance to share our recommendations to advance the future of open source software security. Some work we’ve done includes founding the Open Source Security Foundation, which has been instrumental already in making security improvements. We’ve also helped drive a number of key security initiatives within the open source community including security scorecards, the SLSA framework to improve the security and integrity of open source packages, and Secure Open Source Rewards to financially incentivize improvements to critical open source security projects.  
• OMB’s Federal zero trust strategy: The publication of the Office of Management and Budget’s zero trust architecture strategy marks an important step for the U.S. federal government’s efforts to modernize under Executive Order 14028. Google Cloud supports this approach, which recognizes the immense security benefits offered by modern computing architectures. For the past decade, Google has successfully applied zero trust principles through our BeyondCorp and BeyondProd frameworks for providing end-user access and securing our cloud workloads. And we’ve brought these best practices from our own journey to global governments and businesses of any size through solutions like BeyondCorp Enterprise and capabilities like Binary Authorization and Anthos Service Mesh, which are embedded in Anthos, our managed application platform. For Federal agencies embarking on this zero trust journey, the Google Cybersecurity Action Team will offer our expertise by conducting Zero Trust Foundations strategy workshops, which can help organizations in the public and private sectors develop actionable and achievable strategies and plans for zero trust implementation. 

Google Cybersecurity Action Team Highlights 

Here are the latest updates, products, services and resources across our security teams this month: 

Security

• Democratizing security operations: We recently announced that Siemplify, a leading security orchestration, automation and response (SOAR) provider, is joining Google Cloud to help companies better manage their threat response. Providing a proven SOAR capability with Chronicle’s approach to security analytics is an important step forward in our vision to advance invisible security and democratize security operations for every organization.
• Security by design: The Highmark Health security team is using “secure-by-design” techniques to address the security, privacy, and compliance aspects of its Living Health solution with Google Cloud’s Professional Services Organization (PSO). Google has long advocated for and followed security by design principles, which is why we’re continuously building enhanced security, controls, resiliency and more into our cloud products and services. 
• Secure collaboration for hybrid work environments: The Google Workspace team shared its recommendations for businesses as they prepare for the future of work,  where the hybrid/flexible work model is becoming standard practice and a new approach to security is essential.
• Anthos Policy Controller CIS Benchmark enforcement: A big part of our shared fate philosophy is to build secure products and not just security products. A recent example of this in action is embedding CIS benchmark policy conformance in the Anthos Policy Controller. We believe the more we embed approaches like this into our products, the more application and infrastructure teams can intrinsically embed security at the start and reduce toil for the security team.
• DevOps for technology-driven organizations and startups: A key success factor for many security programs is the partnership and integration with development teams, and there are some great resources and lessons in our DORA research.
• Security by design with Chrome OS: ABN AMRO’s Asia-Pacific region team recently shared how they are using Chrome OS and CloudReady to work securely in the cloud, reduce total cost of ownership, and add flexibility for employees. This is a great example of secure by design principles in the use of Chromium.

Risk & Compliance

• Boards of Directors summary guide to cloud risk governance: The latest whitepaper from the Google Cybersecurity Action Team outlines how boards of directors can prioritize safe, secure, and compliant adoption processes for cloud technologies within their organizations.  
• TruSight Risk Assessment of Google Cloud: TruSight recently released a comprehensive
  risk assessment report on Google Cloud. Our Enterprise Trust team collaborated on this robust assessment of Google Cloud services to validate the design and implementation of controls. TruSight’s risk assessment of our security controls will help customers accelerate and complete their risk management due diligence.
• Data governance: Check out this new blog series on data governance where our teams explain the role of data governance, its importance, and the necessary processes to run an effective data governance program. Implementing data governance will help maximize value derived from business data, build user trust, and ensure compliance with required security measures.

Controls and Products

• Encrypting Data Fusion: To help meet the security, privacy and compliance requirements of customers in regulated industries like finance or public sector, we announced the general availability of Customer Managed Encryption Keys (CMEK) integration for Cloud Data Fusion, which enables encryption of both user data and metadata at rest with a key that customers can control through our Cloud Key Management Service (KMS). 

Don’t forget to sign-up for our newsletter if you’d like to have our Cloud CISO Perspectives post delivered every month to your inbox. We’ll be back next month with more updates and security-related news.

PIK Group is the leading developer of large-scale residential housing projects in Russia. Founded in 1994, PIK Group has built more than 300,000 apartments – 19 million square meters of residential real estate in Moscow and other cities.

To achieve and maintain its position at the top of the real estate industry, PIK Group has made innovation central to its business model, whether creating new building techniques or embracing automation. New technology, in particular, enables the company to achieve efficiencies at scale and streamline processes, such as with PIK Group’s app, developed in-house, through which engineers can send photographs as evidence of the quality of building work.

PIK Group looked for a reliable, fast way for teams to collaborate across multiple offices, on the road, and at construction sites. Because the company handles large volumes of sensitive customer data, security was a key concern. To create a collaboration platform ready to pull the company together, PIK Group looked for a cloud solution to streamline processes and improve productivity.

“The construction industry is progressing,” says Ilya Tikhomirov, CIO at PIK Group. “There are new ways of working, new construction processes, and new materials. PIK wants to lead change in that external context with an internal transformation.”

Automating collaborative processes for greater efficiency

“One team has information about the layout and condition of our buildings and can count the areas that need work, but then needs to match prices and the required work to that information. Previously, we would spend two to three weeks matching all the lists. Now, using Google Apps Script and Sheets, we can run calculations for a building in one hour.”

– Sergey Fuksman, Deputy CIO, PIK Group

Real estate companies of any size have to communicate between office-based staff and teams on the move. For PIK Group, with more than 7,000 employees and 70 offices in the Moscow region alone, communication has to operate at scale. Because each project involves multiple participants and numerous stages, the right collaboration tools can generate major efficiencies.

“Take costing and scheduling work in an apartment. What might sound simple is a complex process with numerous stages, says Ilya. “We need to define each and every step, and the materials required. One group of employees says what the task requires, then another group of employees cost the materials and labor, and yet another group matches the costs to the plan. That process alone requires a lot of communication and collaboration, and it’s just one of many in a single project.” To enhance collaboration, PIK Group looked to give staff instant access to a central, highly secure file repository from anywhere at anytime.

“It’s so much easier to work with our 2,000 suppliers when we share Docs and Sheets instead of emailing back and forth. The speed and convenience of this new way of working is immediately clear. A number of our third-party contractors have been so impressed that they’ve implemented G Suite at their own firms.”

– Ilya Tikhomirov, CIO, PIK Group

To do that, PIK Group implemented the full range of G Suite collaborative tools across more than 7,000 employees. “G Suite has helped change the way employees think about the work they do,” says Ilya. “It has helped them to foster the culture of a small start-up, with all of the agility associated with that.” Now staff at more than 70 offices in the Moscow region managing the construction and sale of apartment blocks, meet and communicate using Google Hangouts and collaborate over distance on Google Sheets and Google Docs, reducing the need to travel and increasing their efficiency by approximately 20%.

In order to reduce the complex, laborious work of prototyping projects, PIK Group automates aspects of the process using Google Apps Script to match lists in different Sheets and generate documents, as Sergey Fuksman, Deputy CIO at PIK Group explains: “One team has information about the layout and condition of our buildings and can count the areas that need work, but then need to match prices and the required work to that information. Previously, we would spend two to three weeks matching all the lists. Now, using Apps Script and Sheets, we can run calculations for a building in one hour.”

Migrating to the cloud for machine learning at scale

With over 7,000 G Suite accounts implemented, PIK Group has set its sights on migrating local infrastructure to Google Cloud Platform. “We have a big IT department with many developers, and we want to redirect them to important projects instead of IT maintenance,” says Ilya. “With machine learning and TensorFlow, we plan to use data from over 50 systems to inform business decisions.”

PIK Group’s internal change is already yielding external results. “It’s so much easier to work with our 2,000 suppliers when we share Docs and Sheets instead of emailing back and forth,” says Ilya. “The speed and convenience of this new way of working is immediately clear. A number of our third-party contractors have been so impressed that they’ve implemented G Suite at their own firms.”

Deliveroo is the fastest-growing technology company in the United Kingdom, and the first-ever to win Deloitte’s UK Technology Fast 50 two years in a row. Founded in 2013, the food courier service achieved a three-year growth rate of over 15,000% to 2018, expanding beyond its London base to operate in 14 countries in Europe and the Asia-Pacific region, from Spain to Singapore, Hong Kong, and Taiwan.

“G Suite products work really well, with no steep learning curve. As a fast-growing company, our strategy is to go to G Suite tools first to find immediate, effective answers within one integrated solution.”

– Asif Akmal, Director of IT, Deliveroo

The company runs multiple offices in each of its 14 markets, manned by more than 2,500 full-time staff. “Around 2016, we made a clear decision,” says Asif Akmal, Director of IT at Deliveroo. “As the company was scaling, we needed a strategy for all our offices to scale with us, and we needed the right infrastructure to do that. We can’t afford to have downtime, or to have tools that confuse staff, rather than help them.”

Together with Google Cloud Premier Partner Netpremacy, Deliveroo created a strategy around G Suite that emphasizes the speed and efficiency the company needs to set up offices and train new staff.

“G Suite products work really well, with no steep learning curve,” says Asif. “As a fast-growing company, our strategy is to go to G Suite tools first to find immediate, effective answers within one integrated solution.”

Putting videoconferencing at the core of the business

Videoconferencing is central to the Deliveroo business model. “Many of our international offices rely on operational staff from headquarters, whether for daily one-to-ones or group meetings,” says Asif. “Some of our engineers are constantly present in remote offices on a permanent live video stream, with a screen at the desk where there would be a chair. That makes it mission critical for us to have the correct infrastructure in place in order to do videoconferencing.”

Because internet connectivity can be inconsistent at new offices, Deliveroo teams occasionally need to be able to dial into videoconferencing over the phone, as well as connect through the internet. Previously, Deliveroo used a separate videoconferencing solution in order to have this feature. Now, as G Suite Enterprise users, Deliveroo employees can use Hangouts Meet for the same dial-in functionality, higher quality reception, and up to 100 participants on each call.

“Videoconferencing is crucial. And with Hangouts Meet we can have just one AV person in the whole business setting up and overseeing the infrastructure in 14 countries.”

– Asif Akmal, Director of IT, Deliveroo

“It was a simple decision to switch to Hangouts Meet,” says Asif. “It came with the enterprise package that we were already on, so we made a substantial cost savings by stopping the other solution, which cost almost £15 a month per user. Financially, that made it a no-brainer, but Hangouts also works better from a technical and integration perspective.”

“One of the first things that we address as a company moving into a new office is: Where do we get the videoconferencing system in place so we can start doing calls straight away?” says Elliott Shafii, Google Technology Engineer at Deliveroo. That’s why Deliveroo has a blueprint for video conferencing rooms, specifying the equipment required and the size and acoustics of the rooms where they’ll be installed. Once the necessary Hangouts Meet hardware has been delivered, the Deliveroo AV Manager flies out to the location, installs the equipment in two days, signs off on it, and flies back.

“Videoconferencing is crucial,” says Asif. “And with Hangouts Meet we can have just one AV person in the whole business setting up and overseeing the infrastructure in 14 countries.”

Issuing new devices in one-tenth of the time

Deliveroo facilitates its exceptional growth rate by minimizing the time teams need to spend getting to grips with new tools. “With G Suite, users don’t have much that they need to learn,” says Asif. “That means we can deploy the solution in any country and be comfortable that people can walk into a room and connect to a meeting without problems.”

Asif and his team worked closely with Netpremacy to make training in G Suite tools efficient and accessible, for new starters and anyone who wants to learn. “Collaborating on Docs and Sheets, and using Drive to share files instead of sending attachments allows us to move more rapidly than any other business,” says Asif. “That’s why we have permanent staff in the IT team who concentrate exclusively on the onboarding process, so anyone can learn to use one of the G Suite products in just one hour.”

Introducing Pixelbooks is the latest step in Deliveroo’s pursuit of speed and efficiency. “Previously, it took an average of 50 minutes to set someone up on a laptop,” says Asif. “With Chrome devices, that induction period is down to five minutes. We just open the box, enroll the device, and hand it over.”

Creating a cloud-based company

“Our strong relationships with Netpremacy and Google Cloud product managers mean we can align our internal strategies with them. Working together, we can create the ideal environment for our culture of collaboration.”

– Asif Akmal, Director of IT, Deliveroo

Using G Suite, Deliveroo is building its ideal workplace to support a more mobile, agile approach to work. “By the end of next year, we should have the vast majority of new starters using Pixelbooks,” says Asif. “We expect that to increase the use of Docs and Sheets and other G Suite tools, in place of other applications. We want to see ourselves as a cloud-based company, and G Suite is ideal for reaching that goal.”

As part of the further deployment of G Suite tools, Deliveroo plans to roll out more Jamboards, in addition to the 14 already in use across the business. “Previously, we would take photographs of whiteboards and share those,” says Elliott. “I remember seeing someone wheeling a whiteboard back to his desk from a meeting, and thinking ‘That poor guy is going to have to sit at his desk and copy everything down.'”

“At that point, before Jamboards, we actually made a significant financial investment in another interactive whiteboard solution,” adds Asif. “Now that solution is collecting dust, because we’ve got Jamboards, which are much more cost-effective and work brilliantly within the G Suite system.”

“Our strong relationships with Netpremacy and Google Cloud product managers mean we can align our internal strategies with them,” says Asif. “Working together, we can create the ideal environment for our culture of collaboration.”

Embracing the cloud helps Deliveroo both to enable rapid collaboration and to minimize the maintenance and management of infrastructure: an ideal combination for a fast-growing technology company.

Ocado is the world’s largest online-only grocery store. But Ocado isn’t your typical corner grocery store. For one thing, there’s no corner as we’re an online-only grocery retailer reaching British households, and now with a fast-growing non-food business alongside. Our customers shop online using our award-winning webshop or mobile apps and then their orders are picked and packed in one of our huge automated warehouses, the largest of their kind in the world; hours later, our vans deliver to their kitchens in one-hour delivery slots.

Google Workspace allows us to do things our way, wherever and whenever we want. Our staff use Gmail, Google Calendar and Google Drive to stay on top of their day to day work, and Google+ is helping our teams stay in touch, share information and build local communities. Ultimately, all of these tools help to make sure our customers get the groceries they order, on time and in the best possible condition.

But we didn’t stop there. We looked at other ways we could use Google’s technology to help us run our business and started using Google App Engine for building internal applications. For example, we used App Engine to create a new version of our “Where’s My Order” application, which our customers will soon be using to find out where their orders are within our production cycle. Once their order is on the road, the integration with Google Maps allows them to see exactly where their delivery van is. So we’re taking what used to be a chore, grocery shopping, and making it a simple experience that you can do from the convenience of your own home, or wherever you may be.

Our most recent project was on Google Compute Engine. Within our warehouses there are certain tasks that are repetitive and arduous for humans to do, like picking heavy six packs of bottled water into customer orders. So our robotics team is developing solutions that use robots to automate these sorts of tasks and thus release staff for other more important work. But these robots need sophisticated 3D vision systems to enable them to see what they are doing. These are very computationally intensive applications and by providing the instantly flexible and scalable computing power to crunch all those numbers, Compute Engine provided the perfect solution. And, we are already using the cloud to store and process some of the huge volumes of data that our business spits out every minute.

But with an eye to future growth and international expansion, we have plans to use Compute Engine and Cloud Storage to move other parts of our production systems to the cloud. So walk into an Ocado warehouse in the future and you might run into a robot if you’re not careful. Like I said, we’re not your typical corner grocery store.

*Google Workspace was formerly known as G Suite