Cyber Security at the Rio 2016 Olympic Games · Atos, the Atos logo, Atos Codex, Atos Consulting,...

10
Cyber Security at the Rio 2016 Olympic Games

Transcript of Cyber Security at the Rio 2016 Olympic Games · Atos, the Atos logo, Atos Codex, Atos Consulting,...

Cyber Security at the Rio 2016 Olympic Games

| Olympic Games Presentation | © Atos 2

What is behind Rio 2016

Equivalent to a business of 200,000 employees, addressing 4 billion customers, operating 24/7, in a new territory, every 2 years

Customer Experience Trust & Compliance

4BN Worldwide viewers

37 Competition venues with complete IT infrastructure

300,000 + Accreditations

23,000 Media

10,500 + Athletes

0 IT security impact

| Olympic Games Presentation | © Atos 3

Games management over four-year-lifecycle

Supporting Rio 2016 to recruit up to

50,000

volunteers

Volunteer portal

Sport entries & qualifications

Collects and processes data for

each of the

10,500 athletes eligible to

compete in the Games

Accreditation

Identifies accredited participants,

manages registration, assigns access privileges and

provides access control information

for 300,000

people

Workforce management

At work long before the Games start, support the HR

departments with all functions needed for

managing interviewing and training staff and

volunteers

Games Management System

| Olympic Games Presentation | © Atos 4

Provide results and data to the world in real-time

Information Diffusion System

On Venue Results

Venue Commentator Information

System (CIS)

Timing & Scoring

TV Audience

Central

Remote

Central Systems

Internet Websites

World News Press Agencies

Broadcasts & IFs

Printed Reports

Info +

Remote CIS MyInfo +

Dis

trib

ute

d

Printing

Commentator Information System

Scoreboard/ Video board

| Olympic Games Presentation | © Atos 5

Sorry! Can you do it again?

We were rebooting…

| Olympic Games Presentation | © Atos 6

Information security when the world is watching

Bringing together people, processes and technology

Program Management

Critical Games Applications

Systems Integration

Application & Systems Mgmt

Operations Management

IT Security Cloud Services

Availability Integrity Accuracy

Availability Integrity

Data Privacy Confidentiality Integrity

Availability Integrity Confidentiality

Availability Integrity

Timing and Scoring Systems

• Real Time Applications (Scoreboard, Timing and Scoring…)

Information Diffusion Systems

• Near Real Time

• Feed to Press & Broadcasters

• Remote Services

Games Management Systems

• Olympics Resource Planning Applications

•Accreditations, Sports Entries…

OCOG Applications

• Non-Core Games Management Systems

• Administration Services for Organizing Committee of Olympic Games

Internet Facing Applications

• Web Sites

• Olympic Video Player

| Olympic Games Presentation | © Atos 7

Implementation process and methodology

Understand Business

Requirements

Define asset criticality

Define Security Metrics

Identify « normal » Behavior

UNDERSTAND

Evaluate the Risk (scenario-based)

ANALYZE BUILD

Integrate Technology to

enforce Security Controls

Segment the Network

Define Security Domains

MEASURE

RUN

Measure Security Posture Audit

Assess Vulnerability

Detect « abnormal »

Behavior Respond to Incidents

Centralized Authentication / Local

Management

| Olympic Games Presentation | © Atos 8

| Olympic Games Presentation | © Atos 9 9

570 000 000 Raw Events

3 810 000 Correlated

Events

22 477 Alerts

905 Tickets

322 000 000 Raw Events

1 100 000 Correlated

Events

8 936 Alerts

182 Tickets

0 Security incidents 0 Security incidents

Rio 2016 Sochi 2014

Security in action

Atos, the Atos logo, Atos Codex, Atos Consulting, Atos Worldgrid, Worldline, BlueKiwi, Bull, Canopy the Open Cloud Company, Unify, Yunano, Zero Email, Zero Email Certified and The Zero Email Company are registered trademarks of the Atos group. © 2017 Atos. Confidential information owned by Atos, to be used by the recipient only. This document, or any part of it, may not be reproduced, copied, circulated and/or distributed nor quoted without prior written approval from Atos.

Thank You!