Challenge.
Since its founding in 1926, Coko-Werk GmbH & Co. KG has been synonymous with precision and innovation in plastic injection moulding. When it comes to complex components for the automotive, medical, heating and climate control industries, Coko offers everything from a single source. No matter if project management, tool construction for special machines, painting or assembly, the data generated from the development and production of plastic parts need to be securely stored. The TISAX® certification (Trusted Information Security Assessment Exchange) is applied in the automotive industry and stipulates compulsory requirements for information security management systems (ISMS) as well as minimum data protection standards. To prepare for this certification, Coko needed to set up an effective documentation structure and its solution of choice was the Atlassian Confluence management and knowledge tool. Coko needed an IT partner that held the necessary in-depth technical knowledge to support the company with the required IT documentation and the development of a holistic information security strategy in Confluence.
Bechtle is supporting us with the strategic development of an IT process and documentation structure based on the Atlassian Confluence cloud Wiki system. As a supplier for the automotive industry, documentation is the basis for the company-wide information security, compliance and quality management system and we are collaborating with Bechtle to prepare for TISAX® certification.
Johann Born, Head of IT, Coko-Werk GmbH & Co. KG
Solution.
In Bechtle, Coko’s IT found a certified TISAX® consultant that also had knowledge of IT documentation. As an Atlassian Competence Centre, Bechtle holds the Gold partner status meaning the IT company could put together a tailored documentation concept and implement it in Confluence in preparation for the ISO certification. In parallel with the planning and set up of the Confluence Cloud Site, Bechtle configured an initial dashboard and held workshops on IT documentation with the aim of integrating data protection, information security and IT into one management system. Within just a few months, management pages were to be created for the various departments and Coko employees trained on the new processes, and so Bechtle planned and designed a Confluence environment tailored to the requirements of the company. Authorisation structures were configured and individual areas set up for the various departments to ensure a secure and structured document repository.
Templates that had been predefined by Bechtle provide uniformity for employees to create content in Confluence and the IT company also analysed the documentation created in open files before moving them to the new system. In a series of workshops, Bechtle introduced the employees to Confluence and helped them get a feel for the new documentation platform to raise awareness of the well-structured information architecture and its critical importance to Coko. Bechtle also identified potential vulnerabilities through an IT structure analysis Coko can leverage to establish preventative measures as and when required allowing it to react quickly to security incidents or other emergencies. All these measures have fostered a culture of security and compliance at Coko and laid the foundation for ISO certification.
Business benefits.
Thanks to Bechtle’s structured and targeted approach, Coko-Werk GmbH & Co. KG now has a custom Confluence system that not only forms the foundation for IT documentation and processing, but also for a strategic realignment of its information security structure, which in turn optimises workflows and provides a solid basis for the upcoming TISAX® certification. With Bechtle’s support, Coko was able to not only document its in-house IT infrastructure, but also adapt it to meet all current security requirements. What’s more, Bechtle has created awareness for the relevance of structured IT documentation and information security at the company.