Gränges

Strengthening Industrial Cybersecurity and Resilience

How can an industrial manufacturer secure its internal IT environment against unauthorized access, misconfigurations, and data exposure while preparing for stricter compliance requirements?

Gränges

 
Headquarters
Stockholm, Sweden (Finspång facility focus)
 
 
Website

www.granges.com

 
Sites/Employees
Global aluminium manufacturer, ~2,700 employees
 
Year Founded
1896
 
Cypro Services Delivered
Grey-box penetration testing of internal networks and Active Directory, zero-trust recommendations, dark web monitoring, vCISO and governance support, and incident response planning.

The Challenge

Gränges AB, a global leader in the aluminium industry, wanted to strengthen the resilience of its Finspång facility’s IT environment. The company faced risks linked to weak access controls, exposed data surfaces, and internal misconfigurations — all of which could threaten operations, data protection, and long-term trust.

Engagement Approach

Cypro worked closely with Gränges to deliver a grey-box penetration test and strategic cybersecurity support. The program included:

  • Network & Active Directory testing: simulating real-world attacks to uncover critical vulnerabilities.
  • Zero-trust recommendations: guidance on stronger segmentation, authentication, and privileged account management.
  • Dark web monitoring: early detection of exposed credentials and external threats.
  • Governance support: vCISO guidance, policy work, and incident response planning.

Results & Impact

  • Critical vulnerabilities fixed: major issues resolved within 72 hours.
  • Improved maturity:  security maturity level raised from 2 → 4 in three months.
  • Better preparedness: incident handling established at group level.
  • Strategic alignment: infrastructure strengthened to meet ISO/IEC 27001 and NIS2 expectations.
  • Trust reinforced: resilience improved internally and with external stakeholders.

Addressing vulnerabilities quickly, embedding zero-trust principles, and aligning with international standards creates both operational security and long-term strategic value.

 

“Cypro has strengthened our information security in a professional and methodical way and prepared us for future requirements. We see the cooperation as long-term and value-creating”

Gränges AB

Other Clients’ Stories

How can a nationwide organization with limited resources defend against phishing, hacktivist threats, and advanced attacks, while maintaining compliance and trust?

Read more

How can a global manufacturer ensure that its internal networks are resilient against unauthorized access, data exposure, and system misconfigurations?

Read more

How can an energy company strengthen security and accountability while staying compliant?

Read more

How can AwardIt, a fast-growing company, turn fragmented security into long-term resilience?

Read more