Executive summary
SEUR, one of Spain’s leading logistics operators, was facing growing risk exposure in a sector under particular pressure from cyber threats and new regulatory requirements. To strengthen its ability to anticipate, govern and respond, SEUR worked with Eraneos to drive an end-to-end transformation of its cybersecurity function.
The project was built around three complementary pillars: defining a formal risk management framework, designing a cybersecurity target operating model, and evolving the managed services model towards more advanced, scalable capabilities. The result is a cybersecurity function that is more structured, sustainable and aligned with business priorities.
The challenge
SEUR operates in a highly digital environment with a strong reliance on suppliers, which demands a mature and coordinated approach to cybersecurity. In this context, the organization identified the need to evolve from a more reactive approach to a comprehensive model that would enable:
- Better identify and prioritize risks
- Strengthen cybersecurity governance
- Align capabilities, responsibilities, and processes
- Prepare the technological and sourcing evolution of security services
Moreover, the organization needed this transformation to go beyond implementing isolated measures and instead establish the foundations of a lasting, measurable capability aligned with the business.
The solution
Eraneos supported SEUR through a transformation program structured around three pillars:
1. Cybersecurity risk management framework:
A comprehensive risk management methodology was designed, covering everything from context analysis to risk assessment, treatment, and acceptance. The framework was aligned with ISO 27001 and ISO 27005, incorporating risk categories, decision criteria, and risk appetite. This work led to a Cybersecurity Master Plan 2026–2028 and a methodological foundation that is sustainable over time.
2. Cybersecurity target operating model
Eraneos defined SEUR’s target operating model, structuring the cybersecurity function around governance, people, processes, and technology. The model was aligned with international reference frameworks such as NIST and ISO, and organized the function’s capabilities before, during, and after a threat, with clear roles and adoption mechanisms.
3. Sourcing and technology evolution strategy
Finally, Eraneos supported SEUR in the evolution of its managed cybersecurity model. This included establishing a dedicated Governance, Risk, and Compliance (GRC) domain, rationalizing the service catalog, and designing the tendering process to move from a traditional monitoring and response scheme (EDR/SIEM) toward more advanced detection and response capabilities (MxDR/XSIEM) and a future cybersecurity operations center (SOC) that is more integrated and scalable.
“In a sector as dynamic as transport and logistics, cybersecurity must be a business enabler, not a barrier. Thanks to our collaboration with Eraneos, at SEUR we have consolidated a Cybersecurity and GRC Operating Model that not only allows us to meet requirements such as NIS2, but also embeds risk management at the heart of our executive decision-making”.
The result
As a result of the project, SEUR now has a more mature and cohesive cybersecurity function, with concrete progress across three key dimensions:
- A formal risk management framework with governance capability at the executive level
- A clear, scalable operating model aligned with international standards
- A forward-looking roadmap for the evolution of technology and managed services
This approach has enabled SEUR to strengthen its organizational resilience, improve cybersecurity decision-making, and consolidate a solid foundation for the continuous evolution of its capabilities.
Distinguishing factors of the project
What sets this case apart is not only the implementation of specific measures or tools, but the building of a comprehensive cybersecurity capability. Eraneos’ contribution combined strategy, governance, operations, and technology in a single transformation program, with an approach that could be transferred to the client’s team and aligned with real business cycles.
The project carried out with SEUR shows how a leading organization can transform its cybersecurity function end to end: from risk management and the operating model to the evolution of its managed services ecosystem. Through this work, SEUR strengthens its resilience and lays the foundations for a more strategic, well-governed, and future-ready approach to cybersecurity.
About the client
SEUR is a pioneer and one of the leading companies in express transport and logistics in Spain, with more than 80 years of history. Founded in 1942, it operates through a distribution network that covers the entire country, with a presence in Portugal as well, and structures its services into three main business lines: international, e-commerce, and B2B. As part of Geopost (formerly DPDgroup), Europe’s leading parcel delivery company, SEUR drives the digital transformation of the sector from its headquarters in Madrid, with a sustainability strategy focused on delivery that is increasingly clean, smart, and accessible for its customers.
