Super Bock Group creates a Security Operations Center

Super Bock Group

The main activity of the Super Bock Group (SBG) is based on the business of beers and bottled waters. It is an extremely competitive field in which competition, local or international, is strong and very active. SBG seeks to be differentiator in these markets, both for its brands and products and for its agility and ability to meet the needs of its customers.

SBG is also present in the segments of soft drinks, wines, production and marketing of malt and tourism business, owning two reference assets in the region of Trás-os-Montes: the Leisure-Thermal Parks of Vidago and Pedras Salgadas. The company is mostly owned by Portuguese capital, 56% by VIACER Group and 44% by Carlsberg Group.

SBG has digital exposure both due to brands and to the need to provide different applications for business partners who access them over the Internet. On the other hand, both SBG and its partners are highly dependent on information systems to operate. In this scenario, the availability of systems is critical for normal business continuity. The vast digitalisation of internal processes of the organisation, such as the increasing dependence of the relationship with customers on digital media, made the security of the group’s information systems gain relevance.


We have an increased visibility in our infrastructure safety incidents, and we’re supported by a team of specialists.

André Miranda
IT Architect and Project Manager
Super Bock Group

The Challenge

Digital transformation may potentiate the group’s proximity to its customers and a differentiation vehicle in the offer to the market of big consumer goods.

Digital media for relations between companies, and between the patter and consumers of their products, may be differentiating factor and growth enhancers, both for SBG and its partners", says André Miranda, IT Architect and Project Manager at the SBG Group.

One of the characteristics of the business that Information Systems have to deal with is the geographical dispersion of business. The existence of several production centres, logistics platforms or a distribution network scattered throughout the country or in foreign markets, increases the capillarity of action of information systems.

In this sense, the path that has been followed is “the centralisation of systems in order to optimise the reuse of our infrastructure and business applications", explains André Miranda.

The importance and relevance of this industrial group on the nation scene, associated with scanning and increased reliance on information systems, led to an increased risk perception associated with exposure to cyber threats.

The Solution

The results of the first audits and security reviews brought the issue of cyber security into the agenda with two obvious options.

The first was to recognise the need for a Security Operations Center (SOC), a single point of contact, available 24x7 to monitor and respond to security incidents. The second is that these powers should not be indoors. The bet was to resort to an external specialised service able to monitor events in real-time.

The choice was Claranet.

The Results

The Super Bock Group deals with the management of its information systems with several external partners. The main point of caution in the introduction of the Managed Security Services component was the integration of the new processes with the existing support processes, and the articulation between the various entities so that the day-to-day cybersecurity service runs as best as possible”, says IT Architect and Project Manager at the SBG Group.

When starting to measure cybersecurity threats, the Super Bock Group concluded that it had an average of 100 annual incidents. With Claranet, risk exposure situations were detected that would not have been detected before adopting Managed Security Services.