Claroty

Effectively securing its generation and transmission operations required the company to confront and overcome the following challenges:Inherently insecure OT networks: Complex and widely distributed architecture, limited OT visibility, and inadequate security controls gave attackers hundreds of possible entry points into the company’s OT networks.OT redundancy: The redundancy of the company’s OT environment meant that attacks were typically only detected if they caused immediate, easily noticeable damage. Heavy reliance on OT remote access: The company’s power plants utilize a large number of unmanned power generation units and also rely on multiple vendors to maintain and service their heat recovery generation systems (HRGS). 

The functional return on investment was a key metric of success, and Parkland avoided significant capital expenditures through better utilization of existing devices.The challenges are as follows:Existing data validity did not meet the requirements of CE and IS teams.Existing workflows were unable to support the leadership’s strategic vision.Unable to dynamically update their computerized maintenance management system (CMMS).Significant change-management hurdles existed between isolated teams.Parkland allocated an insufficient budget to maintain project momentum and meet all expected outcomes.

This company faced the challenge of securing the entirety of its operational technology (OT) environment — from its global security operations center (SOC) to its regional SOCs, all the way down to the factory floor level. The company sought a solution that would apply to its large and dispersed manufacturing operations comprising a dizzying array of OT assets. The solution needed to address the following concerns:Prevalence of incompatible security tools and legacy technology: The company had been relying on fairly traditional, IT-centric security tools that were not compatible with, and thus did not effectively secure, its OT environmentUnmonitored remote access and misconfigurations: Operational complexity historically had led to the company being unable to effectively monitor and manage remote access to its OT environment.The patchwork of systems due to acquisitions: Like other large manufacturers, this company has grown in part by the acquisition of smaller companies, requiring it to manage multiple vendors and a range of approaches to IT and OT securityLack of OT anomaly detection capabilities: Operational disruptions are often difficult to detect until after they have already begun to impact production, which has a cascading effect on operations.