HCLTech helps Falck to implement a modern device management infrastructure

HCL’s Mobile Device Management solution, based on Microsoft Intune, is helping customer FALCK to modernize the management of their workplace environment across USA and EMEA. The initial phase is focusing on office workers with Windows Laptops. The migration for the first 500 users has been completed. Ultimately 5000 users will be migrated to the Intune based MDM solution.

The implementation of a modern-cloud based MDM solution has lead to multiple benefits for both employee experience and business operations, including

• Overall improved security through features such as MFA and Conditional Access
• Expected reduction of costs and operational complexity with the future planned removal of the on-premises environment for device management, monitoring and software deployment on end user devices
• Greatly improved user experience and simplified device lifecycle with Windows Autopilot

For this project, HCL provides end-to-end managed services including consulting, implementation, migration, operation and support, leveraging HCL smart tools and automation capabilities.

Falck has a large amount of frontline workers including emergency response teams in ambulances. Overall, their mobile device park consists of 7.000+ rugged devices, mostly Android-based mobile phones or tablets using Microsoft Teams as the collaboration software. Today these devices are managed through a Xenmobile platform. A second phase of the HCL MDM migration project that would aim at the migration of the above devices from Xenmobile to Intune is currently under discussion.

HCLTech automates intelligent security controls for a leading American med-tech company

The client is an America-based company that specializes in the manufacturing of medical equipment and sales of medical devices, instrument systems and reagents.

The client was significantly reliant on a cloud-native business model for business and operational concerns which were prime targets for cyber-attacks and lacking advanced security measures.There was a lack of robust monitoring tools to detect and respond to security threats as a defense against business disruptions.The client was struggling to connect its disparate tools and leverage its data assets at scale for proactive defense and business solutioning.The client’s endpoint detection and response (EDR) and lacking any advanced threat protection (ATP) solutions were outdated.

HCLTech’s solution approach:

The client chose HCLTech Cybersecurity & GRC as its trusted technology partner to help supercharge progress of their enterprise security posture with a proven security framework and transformation delivery. HCLTech stepped in to evaluate the client’s existing digital ecosystem and assessed that the company needed advanced next-gen security upgrades to secure its system and assets from outside threats. This also included the deployment of an effective security monitoring and data security framework across the enterprise environment and leveraging information insights to handle its current and future use case scenarios.To address these goals, HCLTech deployed a security information and event management (SIEM) and a security orchestration, automation, and response (SOAR) platform for their IT landscape. Additionally, we also upgraded and replaced the client’s legacy EDR and ATP systems with an advanced solution stack with four key components:

• Microsoft Sentinel:

  We carried out a complete Microsoft Sentinel proof of concept (POC) exercise in the client’s development environment for current and future use cases and formulated a strategic vision for SIEM and SOAR implementation.Next, we planned, analyzed, designed, built, tested, and run activities for Sentinel tools and built use cases and workbooks for SOAR.

• Azure Microsoft Defender:

  Following that, we completed the Microsoft Defender ATP POC and deployed the solution in the client’s environment through the design, build, test, and run stages.HCLTech implemented an active data loss prevention (DLP) solution using the Defender ATP/DLP to support the client’s ability to identify and label sensitive or classified information.

• MDCA (Microsoft Defender for Cloud Apps): We conducted app discoveries with the Cloud App Discovery tool.Additionally, the solution stack secured SaaS applications end-to-end, using the MDCA tool.Our team of experts also implemented the MIP (Microsoft Information Protection) setup and MDCA for data protection.

• Azure Security Center:

  HCLTech designed and deployed the Azure Security Center and its supporting capabilities (Log Analytics, etc.) to monitor and manage the security of cloud computing resources.At the end, we connected the client’s existing centralized management system to the security center, via application programming interfaces (APIs).

Value delivered

• Provided intelligent security analytics with a unified and consolidated SIEM and SOAR platform
• Automated threat detection and remediation from advanced attacks with Microsoft Defender for endpoints
• Enabled MDCA for better control and visibility over data travel, and provided data protection via MIP
• Improved overall enterprise security posture by enabling a Azure security center at the core of their security operations
• 20% reduction in cost on license & agent management cost
• 65000 endpoints managed through automated detection & remediation through MS Defender
• Completed Microsoft Defender ATP POC with 3 months & deployed the solution in client’s environment within 12 months
• ~ 10% increase in efficiency of threat detection and still qualifying