CLIENTS CASES

One of the largest Japan’s automobile manufacturer with about 1,000 subsidiary companies and affiliates involved in the production of automobiles, automobile parts, and commercial and industrial vehicles.

Business need:

• - Focus on the design, implementation and operation of cyber security controls for the European plants.
• - Security Maturity Assessment of 8 plants across Europe.
• - Analysis of cybersecurity impacts on human lives, operations and product quality.
• - Define policies and management procedures for Asset Management.
• - Define roles and responsibilities for operations activities.
• - Design the architecture to allow secure remote access support.
• - Define monitoring perimeter and OT Detection solution.
• - Implementation of Incident Management practices.

Solution:

• - NTT DATA has gathered an international team with specialists from various European countries to meet the customer's needs which Italy plays a key role.
• - Highly challenging project demanded multidisciplinary skills involving the fields of industrial automation, safety and security.
• - NTT DATA accredited as a company capable of covering the gap between business needs and production aspects.
• - Demonstrated in-depth knowledge of industry security standards, specifically ISA/IEC 62443 and NIST 800-82r2.

Outcomes:

• - Enable transformative Industry 4.0 innovation technologies to increase productivity and operational efficiency in a secure manner.
• - Enable a secure integration between OT and IT systems (Manufacturing Execution System and Enterprise Resource planning).
• - Better understanding of the causes that can lead to a disruption and its possible impacts.
• - Accurate, centralized and automatically updated inventory of company assets.
• - Proactive cyber risk detection and effective incident response.
• - Secure remote working with managed and monitored infrastructure access.

North American FORTUNE 200 company that is one of the world’s largest consumer products companies. It operates worldwide and is supported by an employee base of approximately 7,000 employees.

Business need:

• - Securely architected Azure Cloud instance
• - Migration to the Cloud
• - Accommodation of Client’s architecture and core technologies to enable Client’s Cloud strategies, agile adoption, and automation focus, while complying with Client’s security, risk management, and governance policies.
• - Cloud Security Managed Services

Solution:

• - NTT DATA provided Architecture design of secure Azure Cloud
• - Securely configured and implemented new Azure Cloud instance for Client.
• - Providing Cloud Managed Services including Security Managed Services
• - Cloud Security Managed Services include Azure AD, Key Vault, Secure Configurations, Microsoft Defender for End Point, Microsoft Defender for Cloud, Container Security/Encryption, Managed Firewalls, VPN, Compliance and Remediation, Network Access Control
• - In the process of deploying Microsoft Defender for Identity
• - Implemented best practices to optimize SOP
• - Providing Security Architecture Services

Outcomes:

• - Automate remediation/self-healing
• - Service Level Improvements
• - Shift left/improve resolution timeframes
• - Decrease support costs and helpdesk tickets
• - Next Generation solutions/improved security posture
• - Support model optimization
• - Scalable growth
• - Protection of hybrid environment
• - Thought leadership and innovation through continuous improvement process
• - Reduction/Prevention of Shadow IT

Customer is a European commercial vehicle manufacturer for heavy duty and medium commercial vehicle classes, as well as for buses. In addition, the company produces and sells engines, both for vehicles, but also for generators or maritime propulsion systems.

Business need:

Customer needs to follow and get certified in UNECE Regulation(R156) regarding SUMS(Software Update Management System), to be able to sell cars from 07/24 onwards.
Therefore, the customer was supported by NTTDATA to provide a gap analysis from its current to the desired target state, to define, design and implement the target processes, roles and methodologies and perform the audit. Goal is to be compliant with the regulations and pass the audit.

Solution:

• - Assess current processes, roles, methods, tools used by the customer
• - Alignment against regulatory requirements
• - Identification of gaps and proposal of countermeasures to close these
• - Design and define processes, roles and tools needed for regulatory compliance
• - Implementation of processes
• - Support customer in technical audit

Outcomes:

• - Fast and detailed overview of gaps in organizational process landscape
• - Roadmap to bring process landscape to audit maturity
• - State-of-the-art know-how of how to define and design compliance processes, roles and methods

Our customer is one of the largest suppliers of premium and luxury cars and one of the world's largest commercial vehicle manufacturers. They offer financing, leasing, fleet management, investments, insurance brokerage and innovative mobility services.

Business need:

• - The establishment of a V-SOC to monitor vehicle fleets against potential hacker attacks.
• - In order to properly receive data from the vehicle and take into account the data protection requirements of customers (ex. anonymization), a micro-service must be developed to "translate" data.
• - In order to also be able to reverse anonymized data in the event of a real attack.

Solution:

• - Design and implementation of a V-SOC for the client:
• - Implementation of on-board IDS systems.
• - Creation of processes, runbooks, etc. to respond to incidents in the SOC.
• - Definition of threat intelligence for early threat detection.
• - Development of a hash function for the anonymization and de-anonymization of data.
• - Development of functions for translating in-car data into a readable human and SIEM-readable format

Outcomes:

• - Attacks on vehicles are detected at an early stage and can be stopped.
• - Protection against fleet attacks with high financial damage and reputational damage.
• - Prehensive detection of vulnerabilities leads to more efficient remediation.
• - Data protection requirements are taken into account.
• - Cryptic CAN data is easy for humans to read.
• - Lean Micro-Service solution is cost and maintenance efficient.