Building security foundations for a logistics business

The challenge

A large UAE logistics group had scattered infrastructure, no shared asset inventory and operational knowledge concentrated in individuals and suppliers. Offices, warehouses and business services depended on systems that lacked consistent ownership and documentation.

As Enterprise Security Architect, I led discovery and assessment across 13 workstreams, covering people, processes and technology.

What I did

• Established the architecture baseline. I mapped cloud services, networks, endpoints, applications and storage alongside warehouse scanners, telephony and logistics systems. This connected infrastructure to business dependencies, including how cargo measurements reached operational applications.
• Built ownership and operating foundations. I established a structured Jira Assets inventory and documented service responsibilities, administration and support. Access requests, asset registration, support and change processes were supported by a service portal, knowledge base and central password management.
• Turned findings into a roadmap. I linked risks to priorities, delivery stages and required resources. The four-stage roadmap sequenced governance, central management, security controls and operational improvements. Solution designs covered web protection, cloud hosting and monitoring; continuity planning addressed loss of systems, facilities or suppliers.

The outcome

The company gained a documented enterprise architecture, structured asset inventory, operating guidance and a prioritised backlog for investment and delivery.

Leadership and engineering teams could see what the business depended on, who owned each service and which changes should come next. Wider identity centralisation, monitoring, data loss prevention and recovery testing remained explicit roadmap work.

The contribution was a usable foundation for improving security maturity, with the dependencies and responsibilities needed to execute the plan. Related approach: discovery before the roadmap.