CUSTOMER CASE STUDY TOMAGO ALUMINIUM

Tomago Aluminium
smelts cyberthreats withSophos MTR
Founded in 1983, Tomago Aluminium has been operating for almost 40 years,
producing and exporting aluminium locally and internationally, Australia’s fifthlargest export commodity. As Australia’s largest aluminium smelter, Tomago
contributes over $1.5 billion annually to the Australian economy and produces
25% of Australia’s primary aluminium.

CUSTOMER-AT-A-GLANCE
Tomago Aluminium
Industry
Manufacturing

Number of Users
950 employees in Australia(950 full time employees
plus 190 contractors)Website
www.tomago.com.au

Sophos Customer
since 2015

Sophos Solutions
Sophos Managed Threat
Response (MTR) for
Endpoint and Server
Sophos Device Encryption
Sophos XG Firewall
Sophos Home Solution

CUSTOMER CASE STUDY TOMAGO ALUMINIUM“It was important for us to implement a security
solution that actively finds, exploits, andremediates threats as they appear, rather thanus waiting months until a patch is released.“Dennis Moncrieff
IT Superintendent, Tomago Aluminium

When is the right time
to straighten yourcybersecurity posture?
As the sector most hit by cyberattacks, themanufacturing sector has become a prime target
for cybercriminals. As these attacks become more
prominent and the threat landscape continues toevolve, it was important for one of Australia’s largest
aluminium smelters, Tomago Aluminium, to evolvewith it.
With the scale and complexity of Tomago’s network
increasing, attack surfaces continued to grow,which created security gaps that were identified
via an internal review. Performing regular security
checks is a non-negotiable for Dennis Moncrieff,
IT Superintendent at Tomago, who ensures theorganisation has cybersecurity best practices
in place and operates with modern, innovative
infrastructure to combat attacks.

“Given the criticality and vulnerability of our industry,it’s important for us to consistently review ourcybersecurity posture as we continue to expand ourinfrastructure,” says Moncrieff. “We ran an industry
self-assessment, and it highlighted a missing piecein our security strategy.”
Although digitisation has afforded Tomago
the ability to become increasingly agile in an
everchanging market, it has simultaneously
expanded Tomago’s digital existence. Additionally,cybercriminals have become more sophisticatedand complex in their ability to target organisations,which is why Tomago needed a proactive solution tomitigate any risk of an attack.
“As an aluminium producer, we rely on technology
to power our operations 24 hours a day, 365 daysa year. Any disruption to our production chain canhave huge ramifications. We need to make sure

our systems are protected at all times, but witha relatively small IT team, it’s not feasible to havesomeone continuously monitoring operations tospot any outliers.”

How do you seal the security
gaps for a small security
team?
As a result of the security audit, Moncrieff identified
the need for a solution that would not only provide
round-the-clock support and act as a member of an
extended IT team, but also proactively identify andisolate threats.
“It was important for us to implement a security
solution that actively finds, exploits, and remediates
threats as they appear, rather than us waiting
months until a patch is released,” said Moncrieff.

CUSTOMER CASE STUDY TOMAGO ALUMINIUM“We looked at what products were available in themarket that could provide our team with 24/7
support and ensure we’re proactive in our approachto threats and found Sophos MTR to be the only
solution that was able to fulfil our needs.”
Having worked with Sophos for more than five
years, Moncrieff was confident the solution
would fulfil Tomago’s requirements. However, hestill wanted to put it to the test by deploying apenetration tester. Time and time again, Sophos
MTR neutralised the penetration tests, thwarting
the tester’s every attempt, giving Moncrieff total
faith the solution was providing full protection toTomago.
“Anytime we have performed penetration tests or
red team exercises, I’ve never been short of a phone
call from Sophos MTR,” says Moncrieff. “We’ve also
had people click on a malicious link and almost
install malware, but we are always notified that theincident has been isolated for us to decide the nextstep.”

What are the benefits ofworking with Sophos?
“Sophos MTR has enabled us to take a moreproactive approach to our security; we don’t needto wait until we’re attacked, instead we’re able toneutralise threats before they become an issue,”said Moncrieff. “Especially if our primary expert
isn’t available, having MTR watching over us andproviding an additional layer of security brings
peace of mind to our team.”“Cybercriminals don’t clock-on at 8am and off
at 5pm and it’s simply not feasible to have our ITteam continuously detecting and acting on threat
notifications. Having Sophos MTR removes theneed for our team to be online 24/7, giving us
much needed breathing room while allowing us tocollaborate with the Sophos team directly to help usprioritise threats and respond accordingly.”“Sophos MTR not only gives us peace of mind, butwe know we won’t be caught up in run-of-themill processes as MTR takes these off our plates.
Sophos MTR’s ability to remediate or remove threatsin a swift manner and bring them to our attention
frees us up to focus on high-value tasks.”© Copyright 2021 Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UKSophos is a registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.

“We looked atwhat products
were available inthe market that
could provide ourteam with 24/7
support and ensure
we’re proactive in
our approach tothreats and found
Sophos MTR to be
the only solutionthat was able tofulfil our needs.“Dennis Moncrieff
IT Superintendent, Tomago Aluminium

2021-12-14 CCS-EN (NP)