GBS_Annual_Report2018_V12.1_SCREEN

Glanbia Business Services 2018 Update
CASE STUDY
Information
security
Key Figures Jan—July 2018
Glanbia’s mission critical systems and
networks do not operate as an island.
Being a highly digitised organisation
integrated with trading partners and
selling direct to consumers through
internal channels introduces significant
risks in terms of cyber security
attacks and regulatory compliance.
Cyber attacks can disrupt operations
and cause considerable financial
and reputational damage to even
the most resilient organisation.
15,879,812,969 Total events scanned
306,072,209 Events of security interest
135,380 Attacks defended (100%)
1,150 High alerts
453 Escalations requiring investigation
Challenge
Our IT and security controls
generate millions of events every
day that can be used to identify
malicious or unauthorised activity
on our networks. Making sense of
these events and finding the one
indicator that can help prevent an
attack is no longer a task that can
be done manually.
The ever increasing number and
sophistication of attacks also makes
it impossible to constantly detect
security attacks against our web
sites and IT services.
26
Solution
Glanbia needed to implement
a Security Information & Event
Management platform. Through
our strategic partner, Secureworks,
a suite of monitoring services to
detect malicious activity 24/7—and
perform proactive risk detection—
was implemented for core
infrastructure and critical services
such as SAP and E-commerce
websites.
This service is monitored around
the clock by Secureworks and any
suspicious activity is immediately
escalated to counteract any
targeted attacks against Glanbia.
Results
The security monitoring service is
integrated with over 500 devices
and 25 websites across Glanbia.
Each month the service evaluates
approximately two billion events to
identify security-related warnings, of
which approximately 10,000 security
attacks are detected and automatically
blocked. These events include attempts
to gain unauthorised access to the
Glanbia network, and attempts to install
malicious software on Glanbia PCs and
servers.
Each month, approximately 100 events
are converted into actionable alerts and
escalated into Glanbia or managed by
the Secureworks team. Those events
out of the billions evaluated are the
needle in the haystack that must be
found to maintain a secure and resilient
operating environment for Glanbia.