National Oilwell Varco (NOV) is enhancing its cybersecurity measures under CIO Alex Philips by adopting a Zero Trust architecture and integrating AI into security operations.
The transformation at NOV led to a substantial drop in security events, the cessation of malware-related PC reimaging, and significant cost savings by moving away from legacy hardware.
Philips highlights the benefits of Zero Trust, including increased visibility, a drastic reduction in security incidents, and improved performance.
The implementation of a Zero Trust model allowed NOV to enhance access to internal applications while safeguarding against external threats.
NOV experienced notable network improvements, such as increased speed, reduced latency, and cost savings, by transitioning to internet-based connectivity.
The utilization of AI and Zero Trust mechanisms significantly reduced security noise and intrusion attempts at NOV.
NOV focused on fortifying identity and access management by integrating platforms like Okta and SentinelOne and enforcing multi-factor authentication.
The company also works on real-time token invalidation solutions to prevent unauthorized access even after disabling compromised accounts.
NOV leverages AI in the SOC with tools like SentinelOne's AI security analyst to enhance threat detection and response times.
Philips stresses the importance of board engagement in cybersecurity, showcasing how education and continuous risk assessment have become integral components of their cyber strategy.
Key advice from NOV's journey includes the synergy between security and digital transformation, emphasizing separation of duties in identity security, and a cautious yet proactive approach to AI implementation.