PICK UP

AWS Managed Services Streamline Secure Innovation

For an International automobile manufacturer, design and delivery of a solution for Plant Security

SEKISUI - Development of a predictive quality management platform

Blue Cross & Blue Shield of Rhode Island

Major US Unified School Disctrict Uses Strategic Advisory Services to Create Digital Connections

Agile Transformation of Global Insurance Company

supports financial institution clients with the power of digital technology

Cloud

For an International automobile manufacturer, design and delivery of a solution for Plant Security

One of the largest Japan’s automobile manufacturer with about 1,000 subsidiary companies and affiliates involved in the production of automobiles, automobile parts, and commercial and industrial vehicles.

Business need:

- Focus on the design, implementation and operation of cyber security controls for the European plants.
- Security Maturity Assessment of 8 plants across Europe.
- Analysis of cybersecurity impacts on human lives, operations and product quality.
- Define policies and management procedures for Asset Management.
- Define roles and responsibilities for operations activities.
- Design the architecture to allow secure remote access support.
- Define monitoring perimeter and OT Detection solution.
- Implementation of Incident Management practices.

Solution:

- NTT DATA has gathered an international team with specialists from various European countries to meet the customer's needs which Italy plays a key role.
- Highly challenging project demanded multidisciplinary skills involving the fields of industrial automation, safety and security.
- NTT DATA accredited as a company capable of covering the gap between business needs and production aspects.
- Demonstrated in-depth knowledge of industry security standards, specifically ISA/IEC 62443 and NIST 800-82r2.

Outcomes:

- Enable transformative Industry 4.0 innovation technologies to increase productivity and operational efficiency in a secure manner.
- Enable a secure integration between OT and IT systems (Manufacturing Execution System and Enterprise Resource planning).
- Better understanding of the causes that can lead to a disruption and its possible impacts.
- Accurate, centralized and automatically updated inventory of company assets.
- Proactive cyber risk detection and effective incident response.
- Secure remote working with managed and monitored infrastructure access.

Cloud Security Migration

North American FORTUNE 200 company that is one of the world’s largest consumer products companies. It operates worldwide and is supported by an employee base of approximately 7,000 employees.

Business need:

- Securely architected Azure Cloud instance
- Migration to the Cloud
- Accommodation of Client’s architecture and core technologies to enable Client’s Cloud strategies, agile adoption, and automation focus, while complying with Client’s security, risk management, and governance policies.
- Cloud Security Managed Services

Solution:

- NTT DATA provided Architecture design of secure Azure Cloud
- Securely configured and implemented new Azure Cloud instance for Client.
- Providing Cloud Managed Services including Security Managed Services
- Cloud Security Managed Services include Azure AD, Key Vault, Secure Configurations, Microsoft Defender for End Point, Microsoft Defender for Cloud, Container Security/Encryption, Managed Firewalls, VPN, Compliance and Remediation, Network Access Control
- In the process of deploying Microsoft Defender for Identity
- Implemented best practices to optimize SOP
- Providing Security Architecture Services

Outcomes:

- Automate remediation/self-healing
- Service Level Improvements
- Shift left/improve resolution timeframes
- Decrease support costs and helpdesk tickets
- Next Generation solutions/improved security posture
- Support model optimization
- Scalable growth
- Protection of hybrid environment
- Thought leadership and innovation through continuous improvement process
- Reduction/Prevention of Shadow IT

Managed Security Services

Global healthcare solutions company that incorporates product manufacturing, distribution support, and innovative technology services. FORTUNE 500 company with operations located across North America, Asia, Europe, and Latin America with 15,000 employees.

Business need:

- Consolidate multiple Business Unit’s into one secure infrastructure
- Business Partner who is not just an “Order Taker”
- Complex enterprise operating environments, different process, capability & taxonomy
- Different security solutions within Business Units
- Reduction in circuit costs, software and hardware licenses and support

Solution:

- Reviewed list of solutions and recommended tool consolidation or transformation to next generation solutions such as SASE
- Provided Information Security Manager to provide Service Delivery Management, contract governance and thought leadership
- Migrated current infrastructure to Hybrid Cloud
- Reviewed current processes and improved and expanded capabilities at a lower cost
- Solutions include IAM, SOC/SIEM, Threat Hunting, Incident Response, Vulnerability Management, Key Management, Azure AD, SSO, MFA, Cert Management, EDR, PAM, WAF, Next Gen Firewalls, VPN, SASE and UAA

Outcomes:

- Significant savings in reduction of circuit costs with implementation of SDWAN/SASE
- Cost reduction by tool consolidation
- Next Generation solutions/improved security posture
- Improved Support Model
- Thought Leadership and Innovation
- Service Level Improvements
- Operational Improvement
- Improved Incident Handling and Response

Customer Identity and Access Management Solution for Banking Services

Leading Italian banking group with approximately 25,000 employees and 5,000,000 retail customers. Implementation of SCA, 3DS, SCA functionalities through the adoption of commercial security solutions

Business need:

- Enable customers access control infrastructure in compliance with the PSD2 directive and other compliance requirements
- Support and protect credit cards payment mechanisms (3DS and 3DS2)
- Introduce Strong Customer Authentication (SCA) and Dynamic Linking mechanisms for transactions
- Support more than one SCA methodology including Fallback solutions
- Increase security levels by replacing custom components with market solutions
- Make the solution easily scalable in order to handle a growing workload.
- Migration from the current custom solution to the identified solution

Solution:

- Implementation of the new access control infrastructure and Strong Customer Authentication solution. Modification of the new onboarding processes of the new infrastructure.
- Use of ForgeRock Access Manager to handle access control and of Entrust IdentityGuard for SCA
- Introduction of the Dynamic Linking feature on all devices
- Risk-based authentication: Integration with the anti-fraud engine both during the authentication (login) and authorization phases (including handling of additional authentication factors if needed)
- Introduction of standard protocols such as OpenID and SAML

Outcomes:

- Decrease of login time with a 5:1 ratio between custom and commercial product.
- Increase of security and decrease of operating costs through the adoption of market solutions.
- Simplification of patch management processes
- Decrease of go-to-market times for access control and authentication features
- Fulfillment of compliance and auditing functionalities already considered for commercial products