Challenge
The corporate segment ran antivirus products of different generations and versions, so the security team had no single view of threats. The rollout could not interfere with plant operations: all changes had to happen in agreed windows.
What we did
- Surveyed the environment and designed Kaspersky Security Center with grouping by site and node type
- Supplied Kaspersky EDR Optimum licenses with procurement paperwork
- Rolled out agents remotely in three waves to an agreed node list within the client's windows
- Configured policies, exclusions for plant business software and reporting for the security team
- Handed over operating and incident response procedures; the process control network was out of scope
Outcome
The security team sees every corporate node in one console and investigates incidents along the full chain of events. Each of the three rollout waves was accepted against a node list.