Customer story · Industrial · Türkiye
An Industrial Conglomerate Unifies Monitoring Across 30+ Subsidiary Brands.
A major Türkiye-based conglomerate’s external footprint grew through decades of organic growth and acquisitions. Watching 30+ subsidiaries through 30+ separate tools was not workable.
-
Food production
7 subsidiaries
1 acquired · inherited infrastructure found
-
Consumer goods
7 subsidiaries
1 acquired · inherited infrastructure found
-
Packaging
5 subsidiaries
-
Manufacturing
6 subsidiaries
1 acquired · inherited infrastructure found
-
Energy
5 subsidiaries
Group CISO
One rolled-up score on one scale
30+ Subsidiaries Ran 30+ Security Programs.
A Türkiye-based group with 30+ subsidiary brands across food production, consumer goods, packaging, manufacturing and energy, operating in Türkiye and several international markets.
Each subsidiary ran IT and security semi-independently. Some programs were mature, others were not, and external monitoring ranged from partial to absent.
- Employees
- Tens of thousands
- Revenue
- Multi-billion USD, aggregate
- Sectors
- Food, consumer goods, packaging, manufacturing, energy
- Markets
- Türkiye and international
Group Visibility Without Tooling Chaos.
The group CISO needed consistent evidence across all subsidiaries, without forcing each one to reorganize its tools overnight.
One Question, 30+ Answers
Asked whether they knew their external surface, most subsidiaries said no and some said partly.
Manual Group Reporting
Group-level reporting meant collecting data by hand from each subsidiary.
Inherited Infrastructure
Acquisitions left shadow infrastructure across several acquired entities.
One Portfolio per Subsidiary.
The group deployed the Deepinfo Platform across the parent and its subsidiaries, each as a separate portfolio. Each role sees the part of the group it is responsible for.
| Group CISO | Rolled-up dashboards across all subsidiaries, on one consistent score |
|---|---|
| Subsidiary teams | Their own portfolio: surface, issues and evidence |
| Each entity | Scanned the same way by External Attack Surface Management, across all data layers |
| Vendors | Inside and outside the group, monitored as third parties in Third-Party Risk Management |
| Acquisitions | Inherited infrastructure, added as Asset Discovery finds it |
-
Parent EASM
-
Parent (scanned)
the group CISO’s rolled-up dashboards, one consistent score
-
-
Subsidiaries, by sector EASM
-
Food production (scanned)
-
Consumer goods (scanned)
-
Packaging (scanned)
-
Manufacturing (scanned)
-
Energy (scanned)
30+ portfolios, one per subsidiary: each team sees its own surface, issues and evidence
-
-
Acquisitions EASM
-
Inherited infrastructure (not in the inventory) (scanned)
added as Asset Discovery finds it
-
-
Vendors TPRM
-
Inside the group (scanned)
-
Outside the group (scanned)
monitored as third parties
-
What Changed Across the Group.
Group
Unified Visibility
Rolled-up dashboards across 30+ subsidiaries, with consistent scoring that makes risk comparable.
Subsidiaries
Local Visibility Kept
Subsidiary teams see their own surface, and nobody had to reorganize their tooling.
M&A
Inheritance Found
Inherited infrastructure enters the inventory as Asset Discovery surfaces it.
Reporting
Evidence, Not Collection
Group CISO reporting runs on Deepinfo evidence instead of manual data collection.
Bring Every Subsidiary Into One View.
Book a walk-through with portfolios set up the way your group is structured.