An important element of the strategy for the LOTOS Group and LOTOS Terminale S.A. is increasing its market share in the fuel industry. Silesia is not only the largest but also the fastest growing market for liquid fuel consumption. Since October 2005, LOTOS Terminale S.A. has operated a new fuel terminal. The terminal is one of the most modern in our part of Europe.
All facilities meet European environmental standards. The launch of the new fuel terminal significantly improves service efficiency and increases sales.
What did the client expect?
The project involved conducting a security audit to assess compliance with the National Cybersecurity System Act (KSC). During the audit, the aim was to examine and evaluate the technical and organizational security measures, as well as the security of processes related to information flow, infrastructure, and software. PBSG was selected for the task due to our flexibility and comprehensive approach, as well as our extensive experience in similar projects, including for the Lotos Group.
The project was completed in the third quarter of 2022.
What did we do?
WE PREPARED THE AUDIT PLAN
At the beginning, there was a plan. We defined the audit program, its scope, and methodology. The reference points were not only the KSC Act but also ISO 27001 and ISO 22301.
WE CONDUCTED THE AUDIT
We collected and examined the documentation to assess whether and to what extent LOTOS Terminale complies with the requirements and obligations arising from the provisions of the KSC Act.
WE DELIVERED THE REPORT
We summarized the audit results in a clear and practical report, where we discussed and assessed the current state and identified areas for improvement.
What were the results?
Thanks to cooperation with PBSG, the client confirmed the level of security required by the Act on the National Cybersecurity System. It is worth noting that Lotos Terminale not only confirmed compliance with the KSC Act but also received an independent opinion and recommendations, which will help improve their security systems in the future, thereby strengthening their position as a trusted critical service operator.
What did the client gain?
Compliance with the requirements of the Cybersecurity National System Act.
Increase in information security level.
Increase in risk and security oversight in accordance with the KSC Act.
