Industry
Transportation, retail
Employees
2,200
Region
Denmark, Europe
THE CHALLENGE
Copenhagen airport puts cyber resilience to the test
One of the world’s most highly digitized airports, Copenhagen Airport (CPH) uses technology to deliver every traveler a positive and safe experience, including 24-hour cybersecurity. TrendAI™ is CPH’s partner of choice to provide that protection and has also called on the team for a comprehensive red teaming exercise to identify potential vulnerabilities in the airport’s IT environment and strengthen their cyber resiliency.
An airport-wide security challenge
With three terminals full of restaurants and shops serving more than 50 airlines and millions of passengers every month, CPH has an extensive infrastructure to manage and secure. Its scope of operations requires a broad security focus, both in terms of information technology and operations technology. “We have a lot of different departments focused on security: physical security, IT security, operational security, we even have our own fire department,” explains CPH IT Security Operations Manager Mikkel Madsen.
That complexity demands a full understanding of the strength of security across all systems. So, the offer of a red team engagement by TrendAI™ was a welcome opportunity. “We want to know all our blind spots and improve our cyber resilience,” Madsen says.
“We’ve been with TrendAI™ for a long time. It has been a great journey for more than 20 years, and it’s only gotten better over time.”
Mikkel Madsen
IT Security Operations Manager, Copenhagen Airport
THE SOLUTION
A partnership that goes the distance
“We’ve been with TrendAI™ for a long time. It has been a great journey for more than 20 years, and it’s only gotten better over time. We use so many of their solutions, all helping us in areas where we are lacking,” continues Madsen.
TrendAI™ gives CPH the ability to monitor and manage security 24/7, which is something the airport cannot do on its own. “We cover basic IT security very well, but we just don’t have the manpower for 24/7 operations,” explains Madsen. “We use TrendAI Vision One™ Services – Complete, which includes managed detection and response (MDR). The service means our staff doesn’t have to try to maintain 24/7 operations.”
CPH also appreciates the unparalleled level of support they get from the TrendAI™ team. “I always feel like we are heard. The person I talk with at TrendAI listens and truly understands what we need. They do their best to meet our needs. I know that relationship is not possible with other large vendors,” says Madsen.
Breaking in to build better defenses
Red teaming offers a third-party view of an organization’s security landscape, even in a security environment as broad as CPH. In Madsen’s opinion, that’s the most important aspect of the process. “Their job is to try to break your environment, which is the goal, and they tell you what they did and how they did it. Then they tell you what you should do to improve,” he says.
“With the whole airport depending on security solutions, the red team exercises help us to maintain our wholeairport focus and reduce our risk exposure across all operations.”
We just don’t have the manpower for 24/7 operations. We use TrendAI Vision One Services – Complete, which includes managed detection and response. The service means our staff doesn’t have to try to maintain 24/7 operations.
IT Security Operations Manager, Copenhagen Airport
Mikkel Madsen
THE RESULTS
Fast, thorough, and worth every krone
As expected with red teaming exercises, security vulnerabilities were discovered. Madsen was impressed by the speed and diligence of the TrendAI™ team and felt they provided valuable insights into the airport’s security posture. “They worked hard, around sixteen hours per day,” he says. “They got to their goal fast. Afterward, we had a great discussion, and they delivered a detailed final report. I would say we really got a lot of value for the money.”
CUSTOMER SERVICE AS A DIFFERENTIATOR
Turning findings into action
Red teaming isn’t simply about finding potential problems and security vulnerabilities; it’s a tool to eliminate those vulnerabilities. But that process often requires obtaining buy-in from upper management, which red teaming can help with. “Using the final report and daily findings from the red team, we can go to our management and show them that we have these blind spots, these holes, and these vulnerabilities within our environment,” says Madsen. “It will help in getting budgets approved and projects prioritized. Our resiliency will be enhanced for the future.”
ABOUT TRENDAI™
TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.
AI Fearlessly.
Join 500K+ Global Customers
Get started with Trend today