Download PDF
Vectra AI Inc. > Case Studies > Pennine Care NHS counts on Vectra to stop cyberattacks
Vectra AI Inc. Logo

Pennine Care NHS counts on Vectra to stop cyberattacks

Technology Category
  • Analytics & Modeling - Machine Learning
  • Cybersecurity & Privacy - Network Security
Applicable Industries
  • Healthcare & Hospitals
Applicable Functions
  • Business Operation
Use Cases
  • Cybersecurity
Services
  • System Integration
  • Testing & Certification
The Challenge
Pennine Care NHS Foundation Trust, a provider of mental health and learning disability services in parts of Greater Manchester and Derbyshire, was faced with the challenge of protecting its operations from cyber threats. This became a priority after the 2017 WannaCry ransomware attack that disrupted a third of NHS operations. Although no patient data was compromised and the attack was stopped from spreading, all NHS trusts have since stepped up security to identify and stop future cyber threats. ICT security manager Rizwan Majeed was entrusted to protect Pennine Care NHS from cyber threats. He began to evaluate potential solutions, including network detection and response (NDR).
About The Customer
Pennine Care NHS Foundation Trust is a healthcare organization based in northern England. Since 2002, it has provided vital mental health and learning disability services in parts of Greater Manchester and Derbyshire. The organization is part of the National Health Service (NHS) trusts, which were victims of the 2017 WannaCry ransomware attack that affected more than 150 countries and disrupted a third of NHS operations. Following this attack, Pennine Care NHS Foundation Trust, like other NHS trusts, has stepped up its security measures to identify and stop future cyber threats.
The Solution
After observing how another facility, Bolton NHS Foundation, deployed the Cognito® platform from Vectra® to identify and stop cyberattackers in real time, Majeed decided that this was the optimal NDR solution for Pennine Care NHS. Cognito Detect applies AI-derived machine learning algorithms to automatically detect and respond to in-progress cyberattack behaviors in cloud/SaaS, data center, IoT, and enterprise networks. The platform prioritizes attack behaviors that pose the greatest risk with the highest degree of certainty, enabling Majeed to immediately determine where to start remediation, hunting, and investigating. To further reduce time and resources, Cognito Detect rolls-up multiple alerts into a single incident or attack campaign for investigation. AI-based machine learning automatically ties related threats into one chain of connected events. AI-driven Cognito Recall is a cloud-hosted investigative workbench that uses security-enriched metadata for more productive threat hunting and conclusive incident investigations.
Operational Impact
  • Automated detection and response, giving more time to investigate and hunt for threats
  • Collection and storage of historical metadata to protect data privacy and support GDPR
  • Information needed to reveal attacker’s behavior is one click away

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.