How ONNERA Group Gained Visibility and Reduced Cyber Risk

TL;DR

ONNERA Group, an industrial group within Mondragón Corporation, manages seven operating companies across different systems and environments. Periodic audits gave them snapshots, not answers. XM Cyber replaced those snapshots with continuous visibility, mapped attack paths across the group, and gave the team clear remediation targets every 15 days - steadily shrinking risk across all seven businesses.

“With XM Cyber, you understand that cybersecurity is continuous – and you have support to keep moving forward.”

Iñaki Bizarro, Head of Systems, ONNERA Group

The Challenge

ONNERA Group, a dynamic industrial group within the Mondragón Corporation, faces a unique challenge: managing the security across seven distinct operating companies, each with its own systems and pace. Their business lines span industrial laundry equipment manufacturing and hospitality solutions, demanding a flexible and robust security strategy.

As Iñaki Bizarro, ONNERA Group’s Head of Systems (responsible for systems, networks, and cybersecurity), noted, alignment was critical: “Each company moved at its own pace, and aligning our cybersecurity efforts across the group was a key focus.”

While regular audits offered useful, high-level snapshots, ONNERA Group’s needed a way to transform its security posture from a point-in-time assessment to a continuous improvement model. They recognized the urgent need for real-time visibility that could keep pace with their ambitious digitalization strategy.

The Solution

A strong recommendation led Bizarro to adopt XM Cyber. What immediately set the solution apart was its proactive and prescriptive approach to risk management. XM Cyber goes beyond simply flagging vulnerabilities; it maps attack paths, provides multiple remediation options, tracks progress, and ensures no critical exposure is overlooked. “XM Cyber doesn’t just show you problems – it helps you fix them, offers options, and follows up,” Bizarro noted. “That’s what made it different and valuable for us.”

Benefits & Outcomes

The platform enabled the ONNERA Group’s team to gain real-time insights and prioritize the most critical exposures. This led to the implementation of clear, achievable remediation goals, typically set every 15 days. With continuous monitoring, the team could finally focus their limited resources on high-impact issues, systematically reducing the group’s overall cyber risk.

“XM Cyber forces us to stay engaged. It’s not like antivirus software that you install and forget. With this tool, you understand that cybersecurity is continuous – and you have support to keep moving forward.”

Iñaki Bizarro, Head of Systems, ONNERA Group

Key Takeaways

• Seven operating companies, each on different systems, now share a single continuous view of risk instead of relying on periodic audit snapshots.
• The team sets new remediation targets every 15 days and tracks progress in real time - a pace that keeps risk reduction steady and measurable.
• XM Cyber maps attack paths and provides multiple remediation options per issue, then follows up to make sure nothing slips through.
• A small team with limited resources can now zero in on the exposures that carry the most risk across the entire group.