25 secured application architectures for a public transport operator…

Collage: an architect on a metro platform, in front of a line map whose stations are shielded application blocks; a few secured sections in lime.

Key facts

Client: Public transport operator
Sector: Public transport
Period: since January 2024
Practice: Cybersecurity Architecture
Offers: Trusted Assessment, Trusted Architecture

In figures

application architectures secured: 25

The challenge

A major public transport operator is strengthening the security of its most exposed applications. There are many stakeholders, and both the governance and the people in charge changed during the engagement.

What we did

Assess and plan: review of the existing estate, risk analysis, definition of the security architecture.
Design and implement: hardening of the infrastructure (network, access points, firewalls, intrusion detection and prevention, segmentation), protection of applications and data (encryption, identity and access management, authentication), resilience (backup, disaster recovery).
Operate and govern: policies and procedures, monitoring and incident response, compliance and audit.
Technology and strategic watch for the architecture team.

What changed

25 application architectures secured since the start of the engagement.

An assessment of the existing estate (Trusted Assessment), then the security architecture of each application (Trusted Architecture).

All case studies

Other case studies

From audit to ISO 27001 certification for a 100‑person IT services company
Governance and architecture delivered together: a 105‑document information security management system, a security architecture rolled out in stages, and ISO 27001 certification achieved.
ISO 27001 certification achieved
A cybersecurity training programme for an IT department
After an audit by its supervisor and ahead of DORA: a cybersecurity training programme for more than 130 people in a public financial institution's IT department, designed, run and then handed over to the client.
40% of the three-year programme delivered in the first year

A similar challenge?

Tell us about your context: an expert will get back to you.

or write directly to trust@blooo.io

Reply within 24 hours
Non-disclosure agreement on request, before any exchange
First call of 30 minutes

Your e-mail is sent from your own mail client: blooo.io stores nothing. We only use your details to reply to you. Privacy policy.