Download PDF
Binary Defense Helps Law Firm Improve Cybersecurity by Implementing New SIEM
Technology Category
- Cybersecurity & Privacy - Security Compliance
- Cybersecurity & Privacy - Network Security
- Cybersecurity & Privacy - Endpoint Security
Applicable Industries
- Professional Service
- Finance & Insurance
- Healthcare & Hospitals
Applicable Functions
- Business Operation
- Quality Assurance
Use Cases
- Intrusion Detection Systems
- Regulatory Compliance Monitoring
- Remote Asset Management
Services
- System Integration
- Training
- Cybersecurity Services
The Challenge
The legal industry faces complicated cybersecurity challenges. Law firms are highly-coveted targets for cybercriminals looking to gain access to business capital, trade secrets, and intellectual property. The biggest cybersecurity risks for law firms include phishing, ransomware, leaks of sensitive data, and the risk of malpractice allegations due to poor cybersecurity. The American Bar Association has issued a formal opinion on attorneys’ ethical obligations to avoid cybersecurity breaches. Lawyers are expected to make reasonable efforts when communicating confidential information using the Internet. Depending on the industry of law firms’ clients, they may be subject to comply with regulations such as HIPAA (healthcare). However, some firms might not have a security staff that can tackle security issues around the clock. A Security Information & Event Monitoring System (SIEM) is a useful tool for monitoring data across a law firm’s network. A SIEM helps keep an organization safe by centralizing data from various network devices, including servers, firewalls, etc., and correlating that data to provide a holistic overview of an organization’s security environment. Alerts are generated if abnormal activity is detected. These alerts need to be reviewed by a person to determine if a threat is present, and then acted on if necessary. To fully respond to SIEM alarms, an organization needs to be staffed for 24-hour support or outsource this work to a Security Operations Center (SOC).
About The Customer
One of the top 10 largest law firms, specializing in manufacturing, energy, utility, healthcare, banking, private equity, and technology, was facing significant cybersecurity challenges. The firm had a Security Information & Event Monitoring System (SIEM) in place but was not satisfied with their current technology partner. The firm wanted to upgrade their internal team’s skillset and capacity. Specifically, the law firm felt that the provider wasn’t meeting cybersecurity standards due to poor incident detection and an unresponsive support team. The firm knew they needed a higher level of security with 24/7 monitoring that was quick to address alarms, as well as provide crucial information about the alarm so their team could respond. The law firm selected Binary Defense to replace the existing SIEM technology.
The Solution
Binary Defense recommended AT&T Cybersecurity Unified Security Management (USM) as the replacement SIEM. In 2018 and 2019, Binary Defense was AT&T Cybersecurity’s Global Partner of the Year, recognized as the top Managed Security Service Provider partner using the USM solution. The Binary Defense onboarding team did a standard “rip and replace” with the old technology, and then conducted customized training with the law firm’s staff on how to respond to malicious attacks, and finally created a decision tree of whom in the firm would respond if an alarm occurred. AT&T USM is monitored by the Binary Defense Security Operations Center (SOC), which is a team of cybersecurity experts who keep watch over their clients’ SIEMs 24/7/365. The Binary Defense SOC provides continuous monitoring and quick response to any alarms, ensuring that the law firm’s network remains secure. The SOC team also offers detailed information about each alarm, enabling the law firm’s internal team to respond effectively. This comprehensive approach ensures that the law firm can maintain a high level of cybersecurity, protecting their sensitive data and maintaining client trust.
Operational Impact
Quantitative Benefit
Related Case Studies.
Case Study
Hospital Inventory Management
The hospital supply chain team is responsible for ensuring that the right medical supplies are readily available to clinicians when and where needed, and to do so in the most efficient manner possible. However, many of the systems and processes in use at the cancer center for supply chain management were not best suited to support these goals. Barcoding technology, a commonly used method for inventory management of medical supplies, is labor intensive, time consuming, does not provide real-time visibility into inventory levels and can be prone to error. Consequently, the lack of accurate and real-time visibility into inventory levels across multiple supply rooms in multiple hospital facilities creates additional inefficiency in the system causing over-ordering, hoarding, and wasted supplies. Other sources of waste and cost were also identified as candidates for improvement. Existing systems and processes did not provide adequate security for high-cost inventory within the hospital, which was another driver of cost. A lack of visibility into expiration dates for supplies resulted in supplies being wasted due to past expiry dates. Storage of supplies was also a key consideration given the location of the cancer center’s facilities in a dense urban setting, where space is always at a premium. In order to address the challenges outlined above, the hospital sought a solution that would provide real-time inventory information with high levels of accuracy, reduce the level of manual effort required and enable data driven decision making to ensure that the right supplies were readily available to clinicians in the right location at the right time.
Case Study
Gas Pipeline Monitoring System for Hospitals
This system integrator focuses on providing centralized gas pipeline monitoring systems for hospitals. The service they provide makes it possible for hospitals to reduce both maintenance and labor costs. Since hospitals may not have an existing network suitable for this type of system, GPRS communication provides an easy and ready-to-use solution for remote, distributed monitoring systems System Requirements - GPRS communication - Seamless connection with SCADA software - Simple, front-end control capability - Expandable I/O channels - Combine AI, DI, and DO channels
Case Study
Driving Digital Transformations for Vitro Diagnostic Medical Devices
Diagnostic devices play a vital role in helping to improve healthcare delivery. In fact, an estimated 60 percent of the world’s medical decisions are made with support from in vitrodiagnostics (IVD) solutions, such as those provided by Roche Diagnostics, an industry leader. As the demand for medical diagnostic services grows rapidly in hospitals and clinics across China, so does the market for IVD solutions. In addition, the typically high cost of these diagnostic devices means that comprehensive post-sales services are needed. Wanteed to improve three portions of thr IVD:1. Remotely monitor and manage IVD devices as fixed assets.2. Optimizing device availability with predictive maintenance.3. Recommending the best IVD solution for a customer’s needs.
Case Study
HaemoCloud Global Blood Management System
1) Deliver a connected digital product system to protect and increase the differentiated value of Haemonetics blood and plasma solutions. 2) Improve patient outcomes by increasing the efficiency of blood supply flows. 3) Navigate and satisfy a complex web of global regulatory compliance requirements. 4) Reduce costly and labor-intensive maintenance procedures.
Case Study
Harnessing real-time data to give a holistic picture of patient health
Every day, vast quantities of data are collected about patients as they pass through health service organizations—from operational data such as treatment history and medications to physiological data captured by medical devices. The insights hidden within this treasure trove of data can be used to support more personalized treatments, more accurate diagnosis and more advanced preparative care. But since the information is generated faster than most organizations can consume it, unlocking the power of this big data can be a struggle. This type of predictive approach not only improves patient care—it also helps to reduce costs, because in the healthcare industry, prevention is almost always more cost-effective than treatment. However, collecting, analyzing and presenting these data-streams in a way that clinicians can easily understand can pose a significant technical challenge.