Cybersecurity Enhancement for Major Canadian Bank's OT Infrastructure

A major Canadian bank engaged Kroll to enhance its operational and cybersecurity resilience due to complex risks in its OT environment. The bank faced challenges such as limited visibility across IT/OT systems, evolving sector-specific threats, and potential exposure of critical infrastructure. Kroll implemented a multidisciplinary OT security program that included a tailored threat profile, comprehensive OT risk assessment, and incident response plan review. The assessment revealed governance and visibility gaps, emphasizing the need for improved resilience against a volatile threat landscape. Key systems involved included building automation and control systems managing power and cooling across critical facilities. The engagement required careful collaboration to maintain business continuity while addressing security needs. Kroll's approach utilized non-disruptive assessment techniques and aligned with regulatory expectations, focusing on sector-specific threats and tailored controls.

Key Points: • Kroll delivered a comprehensive OT security program for a major Canadian bank. • The engagement identified critical gaps in governance and visibility within the bank's OT systems. • Non-disruptive assessment techniques were emphasized to ensure business continuity.