OT Plants Security Risk Assessment & Implementation of Threat Monitoring Platform

Customer Background

A major American multinational energy corporation, primarily involved in the oil and gas industry. Company operates over 180 countries and is one of the largest integrated energy companies.

Engagement Snapshot

Deployment and configuration of OT Threat monitoring platform (Claroty) at 31 plants spread across 3 continents (US, Europe and Asia).
Management dashboard configuration, alerts finetuning and dashboards creation
Sites in Scope – 31 sites
Tool used – Claroty CTD platform

Challenges

Unknown risks with existing set of OT policies, procedures, network architecture
Lack of visibility and insights into assets and vulnerabilities within OT environment across manufacturing plants.
Absence of an integrated view of OT network; OT assets and vulnerabilities
Absence of a central inventory and vulnerabilities management for OT assets
Absence of continuous monitoring of OT threats and vulnerabilities

Solution Highlights

Review of existing OT Network and OT VLANs
Deployment and configuration of the Claroty CTD and EMC at manufacturing plants
Baselining and finetuning of the platform
Discovery of OT Assets, Threats & Vulnerabilities
Classification of identified assets based on criticality and threat perception
Integration of Claroty platform with other platform (Splunk, ServiceNow ,& Ivanti VM) for coordinated incident response and orchestration of security workflows.
Creation of Runbooks, SOPs, Training materials; knowledge transfer and handover of the platform to Chevronʼs existing Operations team.