The situation

Larsen & Toubro Limited (L&T) aimed to build and centralise 24x7 security operations. However, the organisation experienced multifaceted hurdles such as a rapidly expanding IT landscape, real-time identification of cyber threats, persisting manual correlations, disjointed governance programs and scalability concerns. L&T also intended to leverage hyper automation and predictive analytics to detect and respond to internal and external cyber threats.

The solution

PwC’s community of solvers assisted in preparing a well-thought-out approach encompassing expansion and maintaining regulatory compliance through planning and goal-derived execution.

• Broadening horizon
  The team facilitated onboarding multiple business units, including corporate, heavy engineering, realty, hydrocarbon, and more, extending security operations across the conglomerate. This expansion broadened detection coverage, device monitoring, and the integration of diverse networks, servers and application assets for threat monitoring.
• Positive progression
  PwC team kickstarted a series of initiatives to facilitate continuous improvement in L&T’s security posture. This included conducting threat landscape reviews, engaging in use case workshops, and roadmapping sprints for short- and long-term impact. By fostering a culture of proactive cybersecurity measures, they aimed to enhance threat visibility, reduce response times and improve incident readiness.
  
• Compliant by design
  The PwC team collaborated with L&T to develop tailored strategies for meeting industry standards and compliance requirements. This involved threat modelling, architecture gap analysis and awareness campaigns to address the evolving cybersecurity landscape and mitigate risks associated with regulatory non-compliance.
  
• Boosting automation and convergence
  The team assisted in implementing automation strategies to streamline incident response processes, reduce analyst effort and enhance the efficacy of security operations. Additionally, PwC recommended convergence of IT and OT environments, aligning with industry standards such as IEC 62443 and fostering a unified approach to cybersecurity across all the business units of L&T.
  

The impact

The collaborative efforts between L&T and PwC yielded notable impact across various dimensions of cybersecurity.

• The deployment of a Chief Information Security Officer (CISO) dashboard brought cybersecurity metrics to the fingertips.
• The onboarding of a large number of devices and integration of User and Entity Behaviour Analytics (UEBA) dashboards enhanced threat visibility and detection capabilities.
• Through threat-hunting initiatives, PwC assisted in identifying and mitigating threats, reducing mean time to detection (MTTD) and mean time to response (MTTR).
• Automation initiatives, including security orchestration, automation, and response (SOAR) implementation and log stoppage automation, streamlined incident response processes and increased cybersecurity resilience.

Through a strategic partnership focused on innovation and excellence, PwC assisted L&T in navigating the complex cybersecurity landscape. By centralising security operations, enhancing threat detection capabilities and promoting regulatory compliance, PwC’s team of experts laid the foundation for a resilient and future-ready cyber defence and took proactive measures in safeguarding digital assets and enabling organisational resilience in an increasingly interconnected world.