Tata BlueScope Steel Reinforces Security with Sophos MTR

Technology Category

Cybersecurity & Privacy - Endpoint Security
Cybersecurity & Privacy - Intrusion Detection

Applicable Industries

Metals
National Security & Defense

Use Cases

Cybersecurity
Tamper Detection

Services

Cybersecurity Services

The Challenge

Tata BlueScope Steel, a leading steel company in the Asia Pacific region, was facing several challenges in its cybersecurity landscape. The company was struggling with a lag in real-time monitoring and frequent endpoint security issues related to security management. Their defensive approach to cybersecurity was proving to be inadequate in an evolving threat landscape. The lack of a Security Operations Center (SOC) to monitor the organization’s security environment 24x7 was a significant concern. The company was also aware of the increasing sophistication of threats and the need to neutralize them before they targeted their IT ecosystem. Additionally, the organization had experienced multiple phishing incidents, and addressing them was a key challenge. The pandemic-induced remote working scenario further exacerbated the situation, making the workforce more susceptible to attacks. Tata BlueScope wanted to extend security to employees working remotely and address the risk from zero-day attacks.

The Customer

Tata BlueScope Steel

About The Customer

Tata BlueScope Steel is a leading steel company, a confluence of two global players in the steel industry - Tata Steel and BlueScope Steel, Australia. The company offers best-in-class products including coated steel, steel building solutions, and related building products across the Asia Pacific region. The company was looking to expand visibility within its network and quickly identify security gaps, incidents, and remediate them. The organization was also aware that threats were becoming even more sophisticated and needed to be neutralized before they actively targeted Tata BlueScope Steel’s IT ecosystem.

The Solution

To address these challenges, Tata BlueScope Steel chose to implement Sophos Managed Threat Response (MTR). The company moved from its existing on-premise Sophos Endpoint solution to a cloud solution. The Sophos partner guided the company through the defining features of Sophos Intercept X Advanced with XDR and MTR Standard, emphasizing the need for the transition. The implementation process was made smooth with a thorough knowledge transfer to the Tata BlueScope team. The solution offered a combination of automated, lead-driven, and lead-less threat hunting, ensuring no threat went unnoticed. With lead-driven threat hunting, a manual, human-led identification and investigation process identified new attacker behavior that was then addressed by the MTR ops team. Lead-less threat hunting combined threat intelligence, data science, and knowledge of attacker behavior with what’s known about Tata BlueScope Steel’s environment to anticipate new attacker behavior.

Operational Impact

The implementation of Sophos MTR has significantly improved Tata BlueScope Steel's cybersecurity posture. The protection across their endpoints is now a collaborative effort between their in-house team and Sophos MTR’s team of qualified security professionals. The company can now neutralize threats and address suspicious activities even before execution. The solution has provided the organization with security peace of mind, knowing there is a dedicated team working to protect their IT ecosystem from advanced threats, both known and unknown.

Quantitative Benefit

Reduced threat response time dramatically
Around the clock threat hunting, investigation, and remediation
Proactive response to threats, irrespective of whether a strong indicator of activity or compromise has been detected or not