Strengthening Critical Infrastructure Security

As operator of critical infrastructure, our client, a major Australian insurance organisation needed to uplift the security and resilience of its Operational Technology (OT) network to meet obligations under the Security of Critical Infrastructure (SOCI) Act and the Australian Energy Sector Cyber Security Framework (AESCSF), all while continuing to support day-to-day delivery for its Operational Network Team.

UnicornX provided a Technology Engineer to support the client's OT systems and network environment, who was then brought onto the cyber security infrastructure uplift to help meet its AESCSF and SOCI compliance obligations. Focus areas spanned:

• Evaluating current OT systems and identifying opportunities to improve efficiency and effectiveness
• Deploying a threat monitoring capability using the Dragos platform across sites, including hardware and software installation
• Auditing patch management practices and implementing uplifts as required
• Leading a log aggregation uplift, centralising system logs across Windows and Linux environments
• Managing privileged access policies and technical controls on the OT network
• Liaising with the Operational Technology Cybersecurity team and following change management procedures

By embedding a dedicated Technology Engineer within the client's Operational Network Team, UnicornX delivered continuity across successive compliance and security workstreams, from OT systems support through the threat monitoring, log aggregation and, more recently, Endpoint Detection and Response (EDR).

• Continuously retained and renewed on the engagement for more than two and a half years
• Delivered a Dragos-based OT threat monitoring capability across the client's sites
• Implemented a centralised log aggregation solution spanning Windows and Linux systems
• Now contributing to the rollout of an EDR solution
• Supported the client's ongoing compliance with the AESCSF and SOCI frameworks