Post on 11-Jul-2020
Does a Presentation About
SOC Need a Title?and how we survived the implementation
JURICA BEČIĆ, CIO
ALEN DELIĆ, CISO
AGENDA2
A AD PLASTIK
B INFORMATION SECURITY MANAGEMENT
D SOC ROLE
F BENEFITS
E IMPLEMENTATION
C AUTOMOTIVE AND SECURITY
ABOUT USAD PLASTIK GROUP | PRESENTATION
3
>35 years of experience
>20 years of presence in Russia
8 production sites in 5 countries
Headquarters: Solin, Croatia
Leading Croatian automotive supplier
Car components development and manufacturing
Revenues EUR 200.0 million
Net profit EUR 9.4 million
Total assets EUR 181.1 million
Zagreb Stock Exchange
Ordinary shares 4,199,584
ABOUT USAD PLASTIK GROUP | PRESENTATION
4
>2,900 employees (without JV company)
>100 R&D employees
Turnover (in M€)
with consolidation of belonging
part of ownership in JV
170184 176
200
232252
0
50
100
150
200
250
300
2014 2015 2016 2017 forecast 2018 plan 2019
PRODUCTION SITES AND KEY CUSTOMERSAD PLASTIK GROUP | PRESENTATION
5
Zagreb, Croatia
Mladenovac, Serbia
Vintai, Russia
Kaluga, Russia
Solin, Croatia
Tiszaújváros, Hungary
Solin, Croatia
Zagreb, Croatia
Vintai, Russia
Kaluga, Russia
Mladenovac, Serbia
Tiszaújváros, Hungary
CERTIFICATESAD PLASTIK GROUP | PRESENTATION
6
Solin, Croatia
Zagreb, Croatia
Vintai, Russia
Kaluga, Russia
Mladenovac, Serbia
Tiszaújváros, Hungary
Solin, Croatia
Zagreb, Croatia
Kaluga, Russia
Mladenovac, Serbia
Solin, Croatia
Zagreb, Croatia
Mladenovac, Serbia
Solin, Croatia
Zagreb, Croatia
Mladenovac, Serbia
AUTOMOTIVE AND INFORMATION SECURITYSECURITY OPERATION CENTER | ADP
7
Quality / In time
Electronic Data Interchange (EDI)
JIT/JIS = High System
Availability
Customer Requirements
and Reputation
Multiple Countries
INFORMATION SECURITY TRANSFORMATIONSECURITY OPERATION CENTER | ADP
8
Security Management
• Security Management fully removed from IT
• ISMS at the Management Board Level
• Corporate Security and strategic approach
• Roles and responsibilities redefined
IT knowledge
• IT security education
• IT security specialists
• Level 1 SOC
Security Operation Center
• Level 2 SOC
• Level 3 SOC
• SOC is a services for IT and incident management
SECURITY OPERATION CENTERSECURITY OPERATION CENTER | ADP
9
SOC
Detect threats and problems
IT input
Incident Management
Input
Evidence
Why outSOurCe?
• slow detection of problems and
incidents
• improper handling of incidents
resulting in material and
immaterial damage
• lack of evidence
• maintenance costs and human
resources education
• lack of recognition of real threats
IMPLEMENTATION PROCESSSECURITY OPERATION CENTER | ADP
10
System and Services Analysis
Implementation of data collection system
Implementation of data processing system
Data transfer towards SOC
Education, procedure development, knowledge transfer
SOC testing and production
SOC STRUCTURESECURITY OPERATION CENTER | ADP
11
SIEMSecurity Information
and Event Management
IMIncident
Management
NIDSNetwork Intrusion Detection System
Advanced Malware
Protection
Endpoint Security
Next-Gen Antivirus
Vulnerability Management
Sandboxing Tools
Data Loss Prevention
12
• Faster reaction• 0-24 with cost
rationalization• Advanced Security
Incident Analysis (L2 and L3)
• Advanced file analysis through several levels of verification
• Reporting
SECURITY OPERATION CENTER | ADP
SOC BENEFITS
13
Your needs. Our drive.
www.adplastik.hr
Your needs. Our drive.