Carbon Black (CB) Response for Philips Lighting

Summary Philips Lighting, N.V. is a global market leader with 34,000 employees in over 70 countries, recognized for their expertise in the development, manufacturing and application of innovative (LED) lighting solutions. A key objective of their security strategy was to be able to quickly adapt and stay ahead of the evolving threat landscape. After Carl Erickson, Chief Information Security Officer at Philips Lighting, launched the organization’s first Security Operations Center, SOC, his mission was to get to “world-class response capability.” That meant finding and deploying a solution providing complete visibility to empower his team and company to conduct business safely. Scalable Real-Time EDR Philips Lighting extensively examined a number of leading endpoint security solutions against a wide range of attacks. Cb Response, Carbon Black’s industry-leading solution for high-speed security teams, was the only product they found that gave their SOC a custom level of control over threat intel sources and was able to support their increasingly mobile user base via a Cloud-based implementation.
“Carbon Black is essentially our Swiss army knife. We can do a lot of different things with a lot of information,” says Erickson “The overall coverage and overall response times were greatly improved from what we had before. For us it was a no brainer.” Faster Detection Since deploying Cb Response in 2016, Philips Lighting has been able to quickly detect advanced threats and close security gaps. Company-wide indicator sweeps, which took weeks to reach 75% completion with a previous solution, are now able to be completed in a fraction of the time. Conclusion Leveraging the unfiltered data collection by Cb Response, the Threat Hunting team can perform rapid queries on live and historic endpoint data to identify new, suspicious activity, thereby eliminating the need to acquire a separate hunting sandbox. Overall, the SOC’s ability to quickly determine if an emerging threat is present in the environment allows for quicker decision-making by Security leadership.