Pipe Metallurgic Company creates the center of monitoring and response to cyber attacks in partnership about Rostelecom-Solar

2020: Creation of the corporate center of monitoring and response to cyber attacks

Pipe Metallurgical Co. (PMC) in partnership with Rostelecom-Solar company implements the large-scale project on creation of the corporate center of monitoring and response to cyber attacks of Security Operations Center (SOC). The center will monitor security risks and to prevent attacks on infrastructure of all key enterprises and information systems of Pipe Metallurgic Company, reported on November 26, 2020 in Rostelecom-Solar.

Work of SOC in Pipe Metallurgic Company will be based on hybrid model. Pipe Metallurgic Company provides hardware capacities, will organize collection of data on a status of office and production IT infrastructure, defines priorities for monitoring and reacts to incidents. In turn, the staff of Solar JSOC of Rostelecom-Solar company traces events of information security, defines their criticality, analyzes the reasons and possible effects, notifies the company on incidents and proposes solutions.

Several enterprises of Pipe Metallurgic Company, executive office and data processing centers are already connected to the center of monitoring. Basic connection and start of the first stage of the unique and checked in practice industry scenarios took only 6 weeks. Infrastructure of the enterprises was during this time completely inspected, key sources of information on events of information security are connected to monitoring, scenarios are adapted to the business processes admitted to the organizations.

To guarantee Pipe Metallurgic Company the up-to-date and complete information about new cyberthreats, the platform of cyber security Solar JSOC collecting such data was integrated with the similar platform existing in Pipe Metallurgic Company. Thus, according to the results of the project of the company perform bilateral data exchange that mutually enriches their bases of indicators of a compromise of information systems and helps to reveal the attacks at the earliest stage.

"The vast majority of operational business processes of the company are automated and are implemented in IT systems. It significantly raises requirements to information security. We should prevent, reveal and react most effectively to any risks where they arose — from office computer to a pipe-rolling camp. As ready-made solutions in the market do not exist, we created hybrid model to integrate competences and experience of the partner in reflection of cyberthreats and our internal industry expertize. In only one and a half months we started based on Solar JSOC and our IT capacities the full-fledged center of monitoring and response to cyber attacks. He already monitors security of IT infrastructure of three largest plants, then a system will cover also other platforms of the company. We also study a project scaling option to provide cyber security of the equipment connected to the industrial control system (APCS)" — the CIO of Pipe Metallurgic Company Dmitry Jacob told.

"Counteraction to cyber attacks is one of the most topical issues for the industry, and showed to Pipe Metallurgic Company not only deep understanding of their importance, but also readiness to act in vanguard of the industry, using at itself the most advanced methods of protection. According to specialists Rostelecom-Solar, attempts of a compromise of industrial infrastructures are more often made for the purpose of long espionage for what malefactors try maximum to be fixed in infrastructure of the enterprise deeply. Besides, such attacks are quite often directed to provoking destructive effects from violation of production processes. At attacks to industrial enterprises malefactors operate with extremely difficult tools complicating their identification by basic means of protecting. Thanks to examination of a command of Pipe Metallurgic Company and dense interaction with specialists of Solar JSOC the project started in short terms and quickly develops, despite the considerable scale and specifics of infrastructure of the customer" — the director of the center of monitoring and response to Solar JSOC cyber attacks Vladimir Dryukov explained.