(After suffering a global malware attack called NotPetya) “Suddenly we were under pressure to securely and correctly pay our employees, because our own infrastructure was impacted. Laptops didn’t work anymore. Or we weren’t allowed to switch on laptops that were working because they could be infected next. So how do we pay our employees? Our teams had to go into Business Continuity Planning mode and find the best solution for every country. It involved long days and weeks for all our payroll teams as well as our IT teams … it took us around three months to get every country back up and running.

The shock was felt across the company. Not being able to compensate our own employees while they were going the extra mile to get overall operations back on track was not a good feeling. The situation allowed us to justify the investment of moving to ADP. During our conversations with ADP ahead of the malware incident, ADP used to regularly outline the strength of their cybersecurity practice. But at that point, I thought, ‘This is nice to have, but won’t be one of the key elements of getting the project approved’.