OT Plants Security Risk Assessment & Implementation of Threat Monitoring Platform

Customer background 

A major American multinational energy corporation, primarily involved in the oil and gas industry. Company operates over 180 countries and is one of the largest integrated energy companies. 

Engagement snapshot

• Deployment and configuration of OT Threat monitoring platform (Claroty) at 31 plants spread across 3 continents (US, Europe and Asia). 
• Management dashboard configuration, alerts finetuning and dashboards creation
• Sites in Scope – 31 sites
• Tool used – Claroty CTD platform

Challenges

• Unknown risks with existing set of OT policies, procedures, network architecture
• Lack of visibility and insights into assets and vulnerabilities within OT environment across manufacturing plants.
• Absence of an integrated view of OT network; OT assets and vulnerabilities
• Absence of a central inventory and vulnerabilities management for OT assets
• Absence of continuous monitoring of OT threats and vulnerabilities

Solution highlights

• Review of existing OT Network and OT VLANS
• Deployment and configuration of the Claroty CTD and EMC at manufacturing plants
• Baselining and finetuning of the platform
• Discovery of OT Assets, Threats & Vulnerabilities
• Classification of identified assets based on criticality and threat perception
• Integration of Claroty platform with other platform (Splunk, ServiceNow ,& Ivanti VM) for coordinated incident response and orchestration of security workflows. 
• Creation of Runbooks, SOPs, Training materials; knowledge transfer and handover of the platform to Chevronʼs existing Operations team.

Value Delivered

• Unified and enhanced visibility into OT assets, threats & vulnerabilities
• Continuous asset discovery, threat & vulnerabilities detection
• OT assets and traffic validation
• Centralized Monitoring 
• Improvement in threat response