Problem:
A UK-headquartered broker reached out to to discuss concerns regarding one of their overseas multinational oil and gas clients.
Response:
Toro’s team was deployed to conduct a comprehensive review of the client's business's endpoint security, encompassing approximately 5,000 computers. This review culminated in the delivery of a cyber maturity audit, evaluating strategy, governance, systems, processes, and controls. The project resulted in notable changes and improvements to cyber controls.
Outcome:
In collaboration with the client, we helped to introduce changes to the global security policy. These changes aligned security practices more closely with industry standards and ensured a more robust and uniform approach to cybersecurity across the organisation.
The review also identified vulnerabilities in the client's network security. As a result, recommendations were made and implemented to enhance network defences. As part of this, we facilitated a mass migration of the client's computer systems to Windows 10. This migration ensured that the organisation was running a more secure and up-to-date operating system, reducing exposure to known vulnerabilities. A dedicated Security Incident and Monitoring Team was established to provide real-time monitoring and response to security incidents. To enhance visibility and incident tracking across multiple sources, the team also deployed a Security Information and Event Management (SIEM) solution. This SIEM solution enabled the client to aggregate and analyse security events, detect anomalies, and respond to potential threats effectively.
As a result of these initiatives, the client significantly strengthened its cybersecurity posture. The changes in security policy, network improvements, operating system migration, dedicated incident response teams, and the SIEM solution collectively enhanced the client's ability to detect, respond to, and mitigate cybersecurity threats, ultimately safeguarding its critical assets and operations.