Think globally, protect locally
\n\u00a0<\/p>\n
Standardizing and centralizing security policy across 40 countries is not a simple task, as Oh recognizes. \u201cAt the start, I told my team that they were about to experience the adventure of a lifetime,\u201d he recalls. \u201cWe seldom have transformational opportunities to impact global ways of working, but I knew with the right support, we could make this adventure much more predictable. And we found that support with IBM.\u201d<\/p>\n
As a first step, a remote\u00a0IBM Security\u00ae X-Force\u00ae<\/a>\u00a0team evaluated and identified areas where visibility could be improved within DDI\u2019s established processes. Then the client\u2019s security personnel coordinated with an onsite IBM Security X-Force consulting team to perform a more in-depth maturity analysis of the group\u2019s global network. And armed with this information, the joint team assembled recommendations that would help further harden security systems and promote global governance that aligns with industry-accepted best practices.<\/p>\n As part of this effort, the DDI and IBM team identified and mapped out appropriate roles and responsibilities of the Doosan staff working within the security infrastructure. Similarly, the joint team engaged in capacity planning for this new security posture while identifying additional use case and incident response runbook options that would help bolster protection efforts.<\/p>\n The joint DDI and IBM team also determined that the Doosan Group would be better served by consolidating its regional security operation centers (SOCs) to a unified, global SOC. With a more tightly integrated and standardized oversight strategy, the group could establish common performance metrics and more easily coordinate across sites and geographies.<\/p>\n Confident in this assessment, DDI moved forward with the recommended security improvements. The new global SOC, overseen by an IBM Security X-Force team, delivers around-the-clock monitoring and protection under a \u201cfollow the sun\u201d model. Throughout each 24-hour period, security responsibility for Doosan\u2019s global infrastructure rotates across three IBM sites, aligning managed detection and response (MDR) support with the region most active at any point during the day.<\/p>\n In addition, the global SOC solution provides DDI with ongoing access to IBM industry experts and security consulting support, as well as the latest global threat intelligence. By taking advantage of this regularly-updated knowledge pool, DDI and the Doosan Group can stay better protected against the most recent threat vectors, including those specifically targeted at the manufacturing sector.\u00a0<\/p>\n To control the operations of the global SOC, DDI worked with IBM to update its core security infrastructure. The team boosted the company\u2019s proactive security incident and event management (SIEM) efforts, deploying Cybereason EDR to oversee endpoint detection and response (EDR). The EDR software can quickly identify, react to and remediate potential threats. And IBM also integrated\u00a0IBM Security QRadar\u00ae SOAR<\/a>\u00a0technology, delivered from\u00a0IBM Cloud Pak\u00ae for Security<\/a>, taking advantage of the open platform with the Cybereason EDR solution to deliver AI-based automation that further streamlines threat responses.<\/p>\n \u201cWe layered in the SOAR capability so that we could resolve false threat detections without occupying our employees\u2019 precious time,\u201d explains Oh. \u201cIt harmonizes with our global SOC, so we can now focus on what\u2019s relevant. And if the system does indeed find a legitimate issue, we can act with agility and conviction.\u201d<\/p>\n To drive continued growth, maturity and everchanging landscape, Doosan leverages IBM X-Force advice engagements to continually optimize security strategy, governance, metrics, and operating model. \u201cOur security posture has changed,\u201d adds Oh. \u201cOur ability to look at and react to a potential threat has changed. Our culture has changed. And our readiness for digital transformation has changed with the global DDI and IBM team.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Think globally, protect locally
\u00a0 Standardizing and centralizing security policy across 40 countries is not a simple task,…\n","protected":false},"author":2,"featured_media":60252,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[33953,33954,410,409,408,33950,33955,33952,4841,33951],"class_list":["post-60251","post","type-post","status-publish","format-standard","has-post-thumbnail","category-doosan","tag-analytics","tag-construction-and-engineering","tag-doosan","tag-doosan-enerbility","tag-doosan-group","tag-ibm-qradar-soar","tag-ibm-x-force","tag-industrials","tag-republic-of-korea","tag-threat-detection-and-response"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts\/60251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/comments?post=60251"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/posts\/60251\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/media\/60252"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/media?parent=60251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/categories?post=60251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/korea\/wp-json\/wp\/v2\/tags?post=60251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}