Intelligent CISO Issue 12 | Page 45

industry unlocked to connect to,” Whelan added. “And we can look at that and within 10 seconds say ‘we know exactly what that is’, but it’s not worrying which at the same level is much harder to filter that out and it’s harder to not listen to. So this has given us a more fine-tuned approach to identify that traffic.” Selecting Vectra Whelan said: “We had been using a different product which had been doing a good job for us for about three years but it hadn’t really been developed. “So we went looking in the space of network-based detection, for a product which had to have that level of Machine Learning in it. “We try to be as innovative as we can so we’re always looking at new products to see what they do differently to what is already on the market.” www.intelligentciso.com | Issue 12 If someone is determined to get in then they will. But at least now we have a way of detecting it earlier and maybe stopping it before it happens. After running Proof of Concepts on two products, the Ardagh Group selected Vectra. “Its back-end services have been very good and the roll-out has been great. It’s pretty much plug and play so we got it out there pretty quickly,” Whelan said. “We couldn’t cost justify 120 plants so I think we have it in about 30 locations at this stage all feeding back into the central brain.” Justifying the business case for the technology to the board Whelan said: “For us, in a way, it’s easy because the re-routing of a single invoice between us and one of our big customers could be worth millions. “So we’re saying that we’re putting all these controls in place to make sure that bank account details don’t get changed without proper authorisation and approval. “And if you’ve got people in finance doing things like that then we really need to manage the risk so that someone doesn’t access that data through a different path and make those changes. 45