Industry:
Transport
The Challenge:
Working with Siemens Mobility to conduct a full project environment health check to ensure their environment was secure and free of vulnerabilities.
The Solution:
Advisory Services, IT Health Check and Penetration Testing.
Benefits:
- Mitigate the risk of data leakage
- Increase cyber-security awareness
- Optimisation of security stature
- Effective remediation
- Security Roadmap
Company Profile
Siemens Mobility is a separately managed company of Siemens AG. As a leader in transport solutions for more than 160 years, Siemens Mobility is constantly innovating its portfolio in its core areas of rolling stock, rail automation and electrification, turnkey systems, intelligent traffic systems as well as related services. With digitalisation, Siemens Mobility is enabling mobility operators worldwide to make infrastructure intelligent, increase value sustainably over the entire lifecycle, enhance passenger experience and guarantee availability. Further information is available at: www.siemens.com/mobility.
The Challenge
Siemens Mobility was seeking a way to help its customer conduct a full in-depth health check. Siemens Mobility needed to ensure the environment was secure, with a breach potentially having significant operational impact on the business.
Siemens Mobility required a partner to test network devices and the wider network to ensure these environments are kept secure. In addition to the testing, any vulnerabilities would need to be identified with the associated issues rectified to ensure the environment is secure.
Siemens Mobility needed a fully certified testing partner, with an expert team and a comprehensive set of tools to ensure no stone was left unturned.
The Solution & Results
MTI was recruited by Siemens Mobility to assist in testing the wider network including devices and VMware environments. Using MTI’s penetration testing and health check services, Siemens Mobility was helped to conduct a full IT health check of their environment. MTI worked closely with the UK Security Officer at Siemens Mobility to fully understand, scope and deliver the health check and testing.
MTI clarified and agreed to the scope with Siemens Mobility whilst also providing insights on additional elements of the network to test. Siemens Mobility’s security team was fully comfortable with the comprehensive levels of certifications and testing tools used by MTI for their customer.
MTI’s expertise and experience helped Siemens Mobility address recommendations that were flagged by the MTI testing team.
MTI Certifications:
- Greenlight members of NCSC Check Scheme (UK Government)
- Independent CREST Council Scheme (Council for Registered Ethical Security Testers)
- Cyber Essentials Scheme Certifying Body
Consultant Level Certifications:
- NCSC CHECK Team Leader
- Check Team Member
- Crest Infra
- Crest APP Certifications
Why MTI?
Through working with a breadth of clients in different industry sectors (and countries) Siemens Mobility was comfortable MTI had good understanding of what was required to successfully complete a full IT health check for their environment. MTI’s comprehensive certifications from NCSC, CREST and Cyber Essentials gave Siemens Mobility peace of mind that MTI’s security team were fully equipped with the expertise to effectively conduct testing.
Having delivered circa ten thousand man-days of penetration testing assessments throughout the MTI team’s lifetime, Siemens Mobility could rest assured knowing that a very efficient and comprehensive testing method/process was being conducted by very experienced consultants. The health check was further enhanced with world-class penetration testing toolsets and exploit frameworks which helped Siemens Mobility identify vulnerabilities.
Siemens Mobility highlighted that the testing was conducted professionally and efficiently, noting that the penetration testing teams involved were very knowledgeable. The outputs provided have allowed Siemens Mobility to build a security roadmap going forward for the environment.