Moody’s mandated Devoteam to equip its client-facing teams with evidence of its high cloud security standards and compliance to local jurisdiction in Europe and Africa. Devoteam Revolve prepared material to support client conversations.

About Moody’s Analytics

Moody’s Analytics provides financial intelligence and analytical tools to help business leaders make better, faster decisions. Its deep risk expertise, extensive information resources, and innovative technology helps clients navigate confidently an always evolving marketplace.

Moody’s is known for industry-leading and award-winning solutions, made up of research, data, software, and professional services, assembled to deliver a seamless customer experience. Thousands of organizations worldwide trust them because of their commitment to excellence, open mindset, and a focus on the customer requirements. For more information, please go to moodysanalytics.com.

Challenges and Objectives

As the financial services industry continues the move to the cloud and adopts SaaS (Software as a Service) solutions to gain resilience and agility, Moody’s interconnected SaaS platform’s mission is to bring together decades of data, experience, and in-depth expertise of expertise of the challenges the risk functions face.

Moody’s is a global institution.  Its customers in multiple jurisdiction require evidence that security and policies are to the highest standards and comply with regulations in all locations where they are present.

In this regard, Moody’s  hired Devoteam Revolve for an external eye on the key questions clients have about cloud security policies and standards, including:

• Is my data safe?
• Is Moody’s use of cloud compliant with security best practices and local regulations?
• Can a foreign government access my data?
• How do I know Moody’s solutions are safe?

How Devoteam Revolve helped

Moody’s chose Devoteam Revolve because of their track record in accompanying digital transformations in the banking industry in France.

Moody’s leveraged their compliance expertise in Europe and North Africa to create collateral for sales teams. Devoteam Revolve created a map of countries where SaaS is an option and gathered information about the way Moody’s handles the security and resilience of its platform, in accordance with industry best practices and local regulations. The findings were consolidated and shared with Moody’s to co-build a presentation customer facing teams can share with clients.

On the technical front it helped Moody’s to assess best practices in data encryption in transit and at rest,  sensible data access management, native resilience and reversibility towards Cloud provider, and the internal actions to make different profiles (marketing, legal, sales, IT) work together to better deal with compliance & IT security subjects.

Results

As a result of the engagement, Moody’s client-facing teams can support and advise their customers on security when choosing Moody’s solutions knowing clearly its level of compliance towards national and international regulations.

Furthermore, this project contributed to improve collaboration between IT, sales and legal departments, and to improve acculturation around legal and technical challenges: technical knowledge for lawyers, legal knowledge for IT people.