Transforming Security Operations for a Fortune 500 Energy Company

Client

A Fortune 500 leading energy provider in the US, offering retail energy services to millions of users across the country through several regulated subsidiaries.

Challenges

• Cost-intensive processes to maintain outdated security operations
• Improper integration of tools rendering it difficult to measure and analyze the security health of monitored infrastructure
• Fragmented configurations restricting visibility into the entire security landscape
• Manual decision-making due to the lack of options to incorporate decisions and responses into the SOAR workflow

Solution

• Providing end-to-end managed security services ensuring 24x7 security monitoring
• Cybersecurity operations and platform engineering
• Threat level analysis
• Establishment of a vulnerability governance process and training of the in-house teams
• System design expertise for the improvement of the security management process
• Threat intel infusion in security operations to enable threat intel-led hunting
• Recommendation of use case scenarios for identifying threats and thereby creating action plans
• Built and continuously maintained a robust cybersecurity infrastructure and ensured real-time security monitoring & response

Key Benefits

• Detailed roadmap created for streamlining the operations of the SOC and provided security coverage for 20000 End Points, 12000 assets, 14000 users, and 18+ security tools
• Configuration of 30+ new email firewall rules extending the protection with integrated email authentication ensuring: 100% virus protection | 99% blocked or redirected spam
• 72% of backlog vulnerabilities fixed
• Achieved a drop in ratio from 95% to 57% w.r.t false positives
• Configured 100+ agents and 50+ security & audit policies to effectively prevent unauthorized database changes to sensitive data tables
• Developed 18 new playbooks, 8 new app integrations, and 20+ enrichment actions which enabled the direct report of incidents to the SOAR
• Automated initial response for critical incidents and obtained a reduction of 30% in the Mean Time to Recovery
• Scanned 1Mn+ vulnerabilities with 100% remediation for critical vulnerabilities