thank you
[Music]
hi I'm Pete Lund VP of OT security
products here at op swap we're at the
arc industry Forum 2023. Jeremy we just
got done with a fantastic panel session
why don't you tell us a little bit about
the use case you're highlighting and the
problems you were solving okay sure Pete
we have global scale at Hitachi energy
right I've got service engineers in 90
different countries I have six different
r d centers across just about every
continent and
um hundreds of developers and project
teams on you know three or four
continents putting together these large
infrastructure scale projects one of the
biggest worries I have and one of the
biggest contractual risk I have to take
care of is to make sure
we don't become a supply chain risk
ourselves to our customers so we're
using meta Defender core to help us in
that endeavor so we use it all the way
in the very beginning where we're
building products so as we import
new source code or we're downloading
projects open source code projects and
stuff from GitHub we're scanning them
and our nightly build process to catch
anything and that that perspective then
we use it in our final build for two
reasons
one the nice thing about the multiple
engines is it say it uses the same
engines as a lot of our customers so it
ensures when we ship something even if
it's just a false positive it won't
trigger the other reason we do it is you
know just to make sure we're not
including any malware as we ship out and
then it goes into even the next phase
when we're I work in the grid
integration Division and we build
large-scale projects right half a
billion dollar HVAC substations we're
using it there to scan everything as we
build it to make sure again we're not
becoming that supply chain risk and
introducing malware into the projects
from the very beginning and then finally
we move it even into our service space
where our service Engineers are using it
to scan files before they go out and
make updates to customer sites Jeremy I
remember when we first discussed your
problem you were using a homegrown
solution I think you had maybe one or
two AV engines that you are managing
yourselves it was quite time consuming
the teams weren't using it globally
consistently in the same way and I know
that was one of the big attractions from
Ops 1 not only that but the ability to
do that multi-scanning which does hit on
some of those key cyber security
requirements for your end customers
exactly Pete yeah so when we started you
know
um several years back we decided to kind
of take this supply chain risk more
seriously and so we started to
require everybody to use three or more
different engines to scan things uh that
sounded great until you tried to
implement it in the real world where now
you have these 90 different Service
locations and six different r d centers
all trying to build and manage their own
three by going with something a product
like opswat meta Defender core is now
I'm able to centralize on one single
server for the entire Globe for all of
Hitachi energy not just my division but
the other pre-operating divisions as
well we all use it all our developers
are building it into their pipelines
whether they're on Azure devops or any
of the other build Frameworks that we
use they're integrating it into their
pipelines all our service Engineers
around the world are able to access it
and upload the files the project teams
are able to do the same thing and it
gives me real consistency it allows me
to control what engines are in place
allows me to balance it across custody
demands across the globe and I'm able to
do it for
much fewer dollars in support costs than
I would if I was having to manage three
or four different engines and all those
different locations so certainly Hitachi
one of the companies that drove us
towards the the Mobile kiosk Square be
able to protect that last mile of a
supply chain when those service
Engineers are on site whether it's on an
oil rig or in a you know substation the
desert or on a hot tarmac that's where
you can really ensure that the team
doesn't drop the ball in the last mile
there tell us a bit Jeremy about how you
would you know use a Mobile kiosk in the
field sure so what I'd like to do is uh
make sure my service Engineers all have
a Mobile kiosk oftentimes they go to
site and the customer doesn't have any
anti-malware protection
oftentimes they're literally in the
middle of
jungles or deserts or anywhere else
there's not a good cell reception or
anything like that so the fact that
before they leave they can go and they
can sync up and have the latest engines
and the latest updates and then take
that with them to site to prove
uh to the customer that they've scanned
and then the nice thing is with Mobile
kiosk is I now get to keep that record
of that scan right and we're just using
the customers engine to scan I don't I
don't get a record so if some malware
gets introduced to the system I don't
have any way to prove our due diligence
side so this way with Mobile kiosk I now
to get to protect myself as well so that
if it ever came to that we would have
the evidence that we did scan thanks for
Jeremy for taking the time to sit down
with me and obviously for anyone looking
for more information around the op spot
Solutions feel free to check us out at
opswot.com
foreign