Copenhagen Airport
Enhancing security resilience with Trend Micro™ Red Teaming
OVERVIEW
In an era of escalating cyber threats, organizations must adopt proactive measures to safeguard their digital assets and infrastructure. Trend Micro™ Red Teaming offers a strategic approach to evaluating and fortifying organizations’ security postures by simulating real-world cyberattacks. This solution brief gives an overview of Red Teaming and its application in enhancing security resilience, using Copenhagen Airport as a case study.
Red Teaming is a structured process that emulates the tactics, techniques, and procedures (TTPs) of threat actors to comprehensively assess an organization’s security defenses. Unlike conventional penetration testing, which focuses on identifying specific vulnerabilities, Red Teaming takes a holistic approach, encompassing people, processes, and technology.
Industry
Transportation
Employees
- 1000
Region
Denmark, Europe
IT Environment
Cisco, Splunk, Qualys
Solutions
CUSTOMER CASE STUDY
Copenhagen Airport, a prominent transportation hub, faced the challenge of securing its extensive infrastructure while managing a diverse range of operations. With limited internal security resources, the airport sought a partner to conduct a thorough assessment of its security posture and identify potential weaknesses. The Trend Red Team was tasked with identifying any external weaknesses in the airport’s infrastructure that could lead to a compromise of the internal network.
CHALLENGES FACED BY COPENHAGEN AIRPORT
The airport’s scope of operations means that security must be managed across multiple terminals, airlines, and operational departments. Yet there are not sufficient personnel to support round-the-clock security monitoring and response. Given those conditions, Copenhagen Airport focused on improving its ability to withstand cyberattacks by strengthening its digital defenses.
Trend Micro Red Teaming’s comprehensive assessments and expert guidance have significantly enhanced our security posture.
Mikkel Madsen
IT Security Operations Manager,
Copenhagen Airport
HOW TREND MICRO RED TEAMING HELPED
- Comprehensive assessment: Red Teaming conducted an exhaustive evaluation of Copenhagen Airport’s entire IT environment, leveraging sophisticated attack simulations to identify vulnerabilities across the board, instead of specific target areas.
- Threat simulation: Red Teaming replicated real-world attack scenarios, including social engineering, lateral movement, and data exfiltration to assess the airport’s defense capabilities.
- Expert analysis: Trend cybersecurity experts provided in-depth analysis and actionable recommendations to strengthen Copenhagen Airport’s security posture.
- Collaborative approach: Throughout the engagement, Trend maintained an open dialogue with Copenhagen Airport, fostering collaboration and knowledge sharing to optimize security strategies.
- Continuous improvement: Red Teaming exercises served as catalysts for continuous improvement, enabling Copenhagen Airport to refine its incident response procedures and enhance overall cyber resilience.
We cover basic security very well, but we just don’t have the personnel for round-the-clock monitoring. Trend Service One with managed detection and response gives us the ability to monitor and manage security 24/7—something we simply cannot do on our own.
Mikkel Madsen
IT Security Operations Manager,
Copenhagen Airport
BENEFITS ACHIEVED
- A stronger security posture: By uncovering vulnerabilities and weaknesses, Copenhagen Airport bolstered its defenses and reduced the risk of successful cyberattacks.
- Improved incident response: Red Teaming exercises validated Copenhagen Airport’s incident response plans, enabling the organization to detect, respond to, and mitigate cyber threats effectively.
- Security awareness: Employees at Copenhagen Airport gained valuable insights into security best practices and threat mitigation strategies, raising overall security awareness.
- Regulatory compliance: Red Teaming helped Copenhagen Airport comply with regulatory requirements, demonstrating due diligence in cybersecurity practices.
CONCLUSION
Red Teaming played a pivotal role in enhancing Copenhagen Airport’s security resilience by conducting comprehensive assessments and providing expert guidance. By leveraging Red Teaming, organizations can proactively identify vulnerabilities, strengthen defenses, and optimize their cybersecurity strategies to mitigate emerging threats effectively.
Discover how Trend can empower your organization to enhance its security posture and resilience against cyber threats. Contact us today to learn more about our tailored cybersecurity solution.
Join 500K+ Global Customers
Get started with Trend today
Industry
Transportation, retail
Employees
2,200
Region
Denmark, Europe
THE CHALLENGE
Copenhagen airport puts cyber resilience to the test
One of the world’s most highly digitized airports, Copenhagen Airport (CPH) uses technology to deliver every traveler a positive and safe experience, including 24-hour cybersecurity. TrendAI™ is CPH’s partner of choice to provide that protection and has also called on the team for a comprehensive red teaming exercise to identify potential vulnerabilities in the airport’s IT environment and strengthen their cyber resiliency.
An airport-wide security challenge
With three terminals full of restaurants and shops serving more than 50 airlines and millions of passengers every month, CPH has an extensive infrastructure to manage and secure. Its scope of operations requires a broad security focus, both in terms of information technology and operations technology. “We have a lot of different departments focused on security: physical security, IT security, operational security, we even have our own fire department,” explains CPH IT Security Operations Manager Mikkel Madsen.
That complexity demands a full understanding of the strength of security across all systems. So, the offer of a red team engagement by TrendAI™ was a welcome opportunity. “We want to know all our blind spots and improve our cyber resilience,” Madsen says.
“We’ve been with TrendAI™ for a long time. It has been a great journey for more than 20 years, and it’s only gotten better over time.”
Mikkel Madsen
IT Security Operations Manager, Copenhagen Airport
THE SOLUTION
A partnership that goes the distance
“We’ve been with TrendAI™ for a long time. It has been a great journey for more than 20 years, and it’s only gotten better over time. We use so many of their solutions, all helping us in areas where we are lacking,” continues Madsen.
TrendAI™ gives CPH the ability to monitor and manage security 24/7, which is something the airport cannot do on its own. “We cover basic IT security very well, but we just don’t have the manpower for 24/7 operations,” explains Madsen. “We use TrendAI Vision One™ Services – Complete, which includes managed detection and response (MDR). The service means our staff doesn’t have to try to maintain 24/7 operations.”
CPH also appreciates the unparalleled level of support they get from the TrendAI™ team. “I always feel like we are heard. The person I talk with at TrendAI listens and truly understands what we need. They do their best to meet our needs. I know that relationship is not possible with other large vendors,” says Madsen.
Breaking in to build better defenses
Red teaming offers a third-party view of an organization’s security landscape, even in a security environment as broad as CPH. In Madsen’s opinion, that’s the most important aspect of the process. “Their job is to try to break your environment, which is the goal, and they tell you what they did and how they did it. Then they tell you what you should do to improve,” he says.
“With the whole airport depending on security solutions, the red team exercises help us to maintain our wholeairport focus and reduce our risk exposure across all operations.”
We just don’t have the manpower for 24/7 operations. We use TrendAI Vision One Services – Complete, which includes managed detection and response. The service means our staff doesn’t have to try to maintain 24/7 operations.
IT Security Operations Manager, Copenhagen Airport
Mikkel Madsen
THE RESULTS
Fast, thorough, and worth every krone
As expected with red teaming exercises, security vulnerabilities were discovered. Madsen was impressed by the speed and diligence of the TrendAI™ team and felt they provided valuable insights into the airport’s security posture. “They worked hard, around sixteen hours per day,” he says. “They got to their goal fast. Afterward, we had a great discussion, and they delivered a detailed final report. I would say we really got a lot of value for the money.”
CUSTOMER SERVICE AS A DIFFERENTIATOR
Turning findings into action
Red teaming isn’t simply about finding potential problems and security vulnerabilities; it’s a tool to eliminate those vulnerabilities. But that process often requires obtaining buy-in from upper management, which red teaming can help with. “Using the final report and daily findings from the red team, we can go to our management and show them that we have these blind spots, these holes, and these vulnerabilities within our environment,” says Madsen. “It will help in getting budgets approved and projects prioritized. Our resiliency will be enhanced for the future.”
ABOUT TRENDAI™
TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.
AI Fearlessly.