Managed Security Operations for a Top Chemical Manufacturer

Client

The client is a leading chemical manufacturing company in the US

Challenges

• Poor security monitoring and incident management processes
• High cost associated with security operations due to lesser automation in operations
• Lack of contextual threat intelligence
• Lack of a comprehensive security solution in place to ensure continuous monitoring, centralized visibility, and collaboration among teams
• Lack of visibility into critical vulnerabilities
• Need for real-time security monitoring and incident response across 13000 EPS, 19000 assets, 11,000 users, and five security tools

LTM Solution

• Set up 24x7 Security Monitoring of devices using Splunk Infrastructure
• Technology integration, including new log source integration
• Analyzed the threat level of the monitored environment and the health of the monitored security devices
• Recommended Security information and event management (SIEM) documentation changes for efficiency, effectiveness of runbooks, and investigation outcomes
• Conducted proactive and contextual threat intelligence analysis–Created content, use case, and playbook engineering

Business Benefits 

LTM’s comprehensive security solution helped the client protect against ransomware and phishing attacks and improved threat detection efficacy and detection coverage.

• No successful phishing attempts observed, like compromising credentials or PII data
• Zero ransomware detections
• Reduced mean time to respond and maintained 100% SLA without any breaches
• No significant malware affected custom assets
• Improved threat detection efficacy and detection coverage with high-quality incident response