Primary Scope:

Build and manage internal SOC. Provide XDR and MDR Services.

CyBourn was contracted to build and manage an internal SOC for Carrefour. The project covers a diverse infrastructure of cloud-hosted network segments and data center hosted virtual machines on their internal cloud, totaling around 5000 assets. CyBourn provides 24/7 Extended Detection & Response services, incident response services, vulnerability management services through CyBourn’s EtherLast application, and information security management dashboards and reporting. As part of the service, CyBourn ingests threat intelligence on emerging threats and threat actors, which is incorporated into detection strategy and threat hunting exercises.

Key Risks:

• Loss of availability due to ransomware
• Loss of service and revenue due to web application vulnerabilities
• Internal breaches and exposed points of entry due to employees working from home

Challenges:

• Lack of environment uniformity and default application of hardening procedures.
• A wide variety of operating system versions and deployment models (bare-metal, VMs, Cloud environments, Kubernetes)

Results:

CyBourn developed custom tools to determine the security posture and online presence of the client. The tools employed by CyBourn are highly adaptable and have been configured for each use case as the integration advanced. Additionally, CyBourn dedicated a Project Manager to handle communications and manage specific support providers, with periodic status calls with various stakeholders throughout the infrastructure to ensure up-to-date information on all planned changes which may affect the security strategy. The CyBourn Incident Response Team is available on-call in case of information security incidents.