Context
In a global organization like Naturgy, the exchange of sensitive information is part of everyday operations: between internal teams, with suppliers, with customers, and with regulatory bodies. This volume of documentation, combined with new regulatory compliance and cybersecurity requirements, demands secure transfer channels that offer control, traceability, and end-to-end protection.
In this context, Naturgy identified the need to strengthen security in the sending and receiving of files, reducing its exposure to operational risks, shadow IT, and potential regulatory non-compliance.
Initial Situation: Use of Non-Corporate Channels
Following an internal audit, Naturgy found that some file sharing was taking place outside established corporate channels, using unauthorized tools and public cloud storage services. This had a direct impact on:
- Control over files entering and leaving the corporate perimeter.
- The traceability of information shared with third parties.
- The ability for centralized monitoring by the security department.
- Exposure to shadow IT and accidental data leaks.
The Challenge
The main challenge was to:
- Standardize file sharing through a secure corporate channel for more than 12,000 employees.
- Significantly reduce the use of unauthorized tools.
- Strengthen control and traceability over information entering and leaving the organization.
- Do so without causing friction for users, while maintaining daily operations and the quality of customer service.
Project Objectives
Naturgy defined clear objectives for the project:
- A single, corporate channel for sending and receiving files with internal and external parties.
- Elimination of shadow IT associated with uncontrolled file transfer solutions.
- Greater traceability and oversight of the document lifecycle, from sending to downloading or expiration.
- Strengthening of regulatory compliance and alignment with the company’s cybersecurity strategy.
The Solution: Tranxfer Exchange as a Secure Corporate Channel
To address this challenge, Naturgy selected Tranxfer Exchange as its secure corporate channel for exchanging files with third parties. The platform enables the secure sending and receiving of sensitive documents through encryption, access control, comprehensive auditing, and integration into the company’s digital ecosystem.
With Tranxfer Exchange, Naturgy has:
- A standardized and controlled channel for all file transfers.
- Complete traceability of information entering and leaving the corporate perimeter.
- Full control over the document lifecycle (expiration, access and download permissions, proof of delivery).
- An environment aligned with the organization’s security and regulatory compliance policies.
Implementation and Integration into the Naturgy Environment
The project involved the deployment of Tranxfer Exchange and its integration with Naturgy’s infrastructure, including:
- Integration with Active Directory
- Centralized authentication from the client’s infrastructure.
- Uniform management of users and permissions.
- Integration with SIEM
- Sending events and logs to the corporate monitoring system.
- Greater visibility and monitoring capabilities from the security department.
- Customization of the look & feel
- Complete adaptation of the platform, manuals, and notifications to Naturgy’s visual identity.
- Strengthening the perception of a secure corporate channel among employees and third parties.
- Multilingual support
- Facilitates adoption within a global organization with users spread across different countries.
- Customized functional adjustments
- Specific adaptations to align file sharing with specific operational needs.
- Seamless integration into day-to-day business operations, without changing channels or work habits more than necessary.
The result is a fully integrated solution, aligned with security and compliance requirements, and offering a simple user experience for the end user.
Areas involved
- CISO / Security Department
- Project leadership, definition of security requirements, traceability, and compliance.
- Coordination with systems, business, and other involved areas.
Daily Use: Key Exchange Scenarios
Today, Tranxfer Exchange is Naturgy’s go-to channel for the secure transfer of files in scenarios such as:
- Sending and receiving sensitive information with external parties
- Exchanging documentation with customers, suppliers, and shareholders, with proof of delivery and access control.
- Traceable interdepartmental communications
- Sending files between internal teams with an action log and control over the document lifecycle.
- Document management with public agencies and external entities
- Sharing and receiving documentation related to auditing, supervision, regulation, and compliance, via a secure and auditable channel.
Results
Following the implementation of Tranxfer Exchange, Naturgy has achieved:
- Consolidating a secure corporate channel for information exchange, replacing the use of unauthorized tools.
- Increasing control over files sent and received, both internally and externally.
- Improving the traceability of information entering and leaving the corporate perimeter, with detailed activity logs.
- Reduce the risk associated with shadow IT and potential accidental data leaks.
- Align file sharing with the company’s cybersecurity and regulatory compliance strategy, without introducing friction into daily operations.
Testimonial
“Tranxfer is the most secure option we have, and it’s what we should use to send files—rather than Google Drive or email, of course.”
Carlos Manchado – (former) CISO at Naturgy
