Forcepoint Case Studies This Energy Provider Keeps the Public’s Trust by Doing More Than Keeping the Lights On

Edit This Case Study Record

	This Energy Provider Keeps the Public’s Trust by Doing More Than Keeping the Lights On Forcepoint

This Energy Provider Keeps the Public’s Trust by Doing More Than Keeping the Lights On

Forcepoint

Technology Category	Analytics & Modeling - Real Time Analytics Cybersecurity & Privacy - Database Security Cybersecurity & Privacy - Network Security
Applicable Industries	Utilities
Applicable Functions	Business Operation Quality Assurance
Use Cases	Cybersecurity Fraud Detection
Services	Cybersecurity Services System Integration
Challenge	The enterprise energy provider, serving tens of millions of customers, faced multiple external and internal vulnerabilities to both the power grid and their multi-pronged operations. The cyber threats faced by all companies—like data loss and fraud—come with the added complexity of protecting critical infrastructure. Breaches, downtime, and fraud can cause massive problems for both the enterprise and its customers, from loss of revenue and reputation to endangering human safety. Safeguarding sensitive customer information is always paramount; in this case, that includes a number of high-profile individuals whose home addresses or social security numbers make a tempting target for data thieves looking for a quick payday. Then, of course, there are the millions of dollars flowing through the company, including funds from the resale of renewable energy that could be fraudulently rerouted through altered direct deposit information. Finally, the company’s substations, not always managed by a human operator, run the risk of being taken over by an outside entity without the company knowing. Read More
About Customer	The customer is a large, U.S.-based enterprise energy provider. The company serves tens of millions of customers and has operating revenues in the tens of billions. The company is in the energy industry and is headquartered in the United States. The company is a major utility and the cyber threats faced by all companies—like data loss and fraud—come with the added complexity of protecting critical infrastructure. Millions of people, companies, and government organizations depend on it, and failure is not an option. Breaches, downtime, and fraud can cause massive problems for both the enterprise and its customers, from loss of revenue and reputation to endangering human safety. Read More
Solution	The enterprise needed a comprehensive and integrated security solution from a partner who understands and aligns with its strategy. That’s why the enterprise cybersecurity team turned to Forcepoint. Forcepoint DLP provides data protection by preventing exfiltration of personally identifiable information and intellectual property across devices, networks, and cloud applications. Behavioral Analytics adds context and takes data protection to the next level by understanding the interactions between humans and data. It does this by ingesting information from multiple sources including cloud applications, email and chat communications, and other security and monitoring products and provides insights to create a comprehensive view of user and entity activity—and even alert to activity indicative of a compromised substation. Insider Threat can then analyze collected information for behavior indicative of fraud or sabotage—including when account numbers are manipulated to execute fraud—as well as provide contextual information to determine intent and archive forensic data to aid in investigations. Read More Log in to view content
Contents

Technology Category

Analytics & Modeling - Real Time Analytics

Cybersecurity & Privacy - Database Security

Cybersecurity & Privacy - Network Security

Applicable Industries

Utilities

Applicable Functions

Business Operation

Quality Assurance

Use Cases

Cybersecurity

Fraud Detection

Services

Cybersecurity Services

System Integration

Challenge

The enterprise energy provider, serving tens of millions of customers, faced multiple external and internal vulnerabilities to both the power grid and their multi-pronged operations. The cyber threats faced by all companies—like data loss and fraud—come with the added complexity of protecting critical infrastructure. Breaches, downtime, and fraud can cause massive problems for both the enterprise and its customers, from loss of revenue and reputation to endangering human safety. Safeguarding sensitive customer information is always paramount; in this case, that includes a number of high-profile individuals whose home addresses or social security numbers make a tempting target for data thieves looking for a quick payday. Then, of course, there are the millions of dollars flowing through the company, including funds from the resale of renewable energy that could be fraudulently rerouted through altered direct deposit information. Finally, the company’s substations, not always managed by a human operator, run the risk of being taken over by an outside entity without the company knowing.

About Customer

The customer is a large, U.S.-based enterprise energy provider. The company serves tens of millions of customers and has operating revenues in the tens of billions. The company is in the energy industry and is headquartered in the United States. The company is a major utility and the cyber threats faced by all companies—like data loss and fraud—come with the added complexity of protecting critical infrastructure. Millions of people, companies, and government organizations depend on it, and failure is not an option. Breaches, downtime, and fraud can cause massive problems for both the enterprise and its customers, from loss of revenue and reputation to endangering human safety.

Solution

The enterprise needed a comprehensive and integrated security solution from a partner who understands and aligns with its strategy. That’s why the enterprise cybersecurity team turned to Forcepoint. Forcepoint DLP provides data protection by preventing exfiltration of personally identifiable information and intellectual property across devices, networks, and cloud applications. Behavioral Analytics adds context and takes data protection to the next level by understanding the interactions between humans and data. It does this by ingesting information from multiple sources including cloud applications, email and chat communications, and other security and monitoring products and provides insights to create a comprehensive view of user and entity activity—and even alert to activity indicative of a compromised substation. Insider Threat can then analyze collected information for behavior indicative of fraud or sabotage—including when account numbers are manipulated to execute fraud—as well as provide contextual information to determine intent and archive forensic data to aid in investigations.

Impact #1	Forcepoint DLP with Behavioral Analytics proved that it could identify, document, and even block file movement by people who have no legitimate need.
Impact #2	It provided the flexibility needed to allow emergency response teams to restore power via USB during a natural disaster.
Impact #3	Behavioral Analytics pulls in historical data to create a baseline, which allowed for quick identification of high-risk anomalies.

Impact #1

Forcepoint DLP with Behavioral Analytics proved that it could identify, document, and even block file movement by people who have no legitimate need.

Impact #2

It provided the flexibility needed to allow emergency response teams to restore power via USB during a natural disaster.

Impact #3

Behavioral Analytics pulls in historical data to create a baseline, which allowed for quick identification of high-risk anomalies.

Benefit #1	Proof of concept found incidents that led to 10 investigations, including three credential sharing and four data exfiltration.

Benefit #1

Proof of concept found incidents that led to 10 investigations, including three credential sharing and four data exfiltration.

Download PDF Version

Overview

This Energy Provider Keeps the Public’s Trust by Doing More Than Keeping the Lights On

Operational Impact

Quantitative Benefit