CASESTUDYNOV Uses the Recorded Future Intelligence Cloud toDefend Against Nation States and Adopt Zero Trust
Global equipment provider trusts intelligence to protect the energy industry.
Use Case:

Attacks against energy companies don’t just threaten intellectual property; they standto endanger critical infrastructure worldwide. That’s why NOV, the global provider that

Build layered defenses against nation-state
adversaries that target oil, gas, and renewableenergy companies“powers the industry that powers the world,” relies on Recorded Future to secure its

Challenge:“Intelligence is extremely important to the energy industry,” says John McLeod, Chief

Integrate and automate cyber intelligence to spot
and prioritize threats and vulnerabilities

incident, and we all know nation states are a big threat. Lots of attacks target our intellectualSolution:
The Recorded Future Intelligence
Cloud, including:• Threat Intelligence• Brand Intelligence• SecOps Intelligence• Vulnerability Intelligence• Recorded Future for Splunk
Enterprise Integration

Outcomes:customers and brand.
Information Security Officer (CISO) at NOV. “Everyone heard about the Colonial Pipelineproperty and the information our customers share with us. We just don't know who plans toattack and when and where they're going to come in. That’s where intelligence comes in.”
Along with building equipment for oil, gas, and renewable energy providers in more than 50countries, NOV works to keep the industry supply chain secure. Nearly a decade ago, theteam brought in experts to identify gaps and create a roadmap for expanding its
cyber defenses.
“One of the things they highlighted was intelligence, and having access to actual analysts,”
says McLeod. “There weren’t many intelligence platforms back then, so we started out witha cyber threat analyst and graduated into a platform from there.”• Defend against nation-state andthird-party attacks

When NOV encountered Recorded Future at the 2017 RSA Conference, the team decided to• Provide automation essential to implement
Zero Trustother vendors was the roadmap I saw,” the CISO recalls. “They keep adding great features• Protect brand reputation throughout theenergy ecosystem• Deliver visibility and analytics tocompany stakeholders

implement the platform to build out its intelligence program. “What stood out above all thethat align to our program.”

Insight, Automation, and a Path to Zero Trust“Threat intelligence helps prioritize my team's ‘go forward’ — our journey, if you will — toa Zero Trust North Star,” McLeod explains. “Visibility and analytics is one foundational
component, orchestration and automation is another. It boils down to understanding thebalance between intelligence and your security controls.”
His team at NOV takes a layered approach and keeps its technology stack integrated
throughout the Zero Trust journey. The CISO credits Recorded Future with furnishing the“key pillar to automation” with an extensible and comprehensive API.

Recorded Future® | www.recordedfuture.com

Recorded Future gives us theconfidence to know what’s high-riskversus what we shouldn’t be spending
our time on."John McLeod,
Chief Information Security Officer (CISO) at NOV“Exactly What Commercial
Companies Need.”
While leveraging intelligence is the norm within many
government agencies, McLeod observes that more ofhis peers in the commercial space should be buildingintelligence into their security programs. “There’s a lotof investment there but it's still been an uphill battle
because some companies really don't understand threat
intelligence,” the CISO says. “As a community, we need tocome together and shine a spotlight on the importance“We were able to partner with Recorded Future to get theintel feeds we need to conduct our automation efforts,”
says McLeod. “Now we can automate intelligence into many
day-to-day things we would otherwise need to do manually.
They’ve also been very accommodating, working with us tobuild out custom feeds when we needed them.”
The NOV team also likes how the Intelligence Cloud combines
insights about threats, vulnerabilities, security operations, andbrand mentions. McLeod observes, “You need to know what’s
important and how to prioritize. You could have a vulnerability,
but is it really exploitable? Recorded Future gives us theconfidence to know what’s high-risk versus what we shouldn’t
be spending our time on.”Intelligence Provides Board-Level Insightto Drive Strategy
With powerful intelligence at his fingertips, McLeod also relieson the network effect of the Intelligence Cloud to inform hisof threat intel and how critical it is to security within thecommercial space.”
McLeod credits Recorded Future with “stepping up thegame” through consistent innovation. “In the intelligencespace, Recorded Future is second to none,” he concludes.
“They have the right platform and the right information
for any company to dive right in and get the informationneeded to analyze threats and report up to seniorleadership. Recorded Future delivers exactly whatcommercial companies need.”

My directors and I deliver aquarterly board presentation, andwe use Recorded Future to makesure the pertinent information is allin the slide deck we provide."company’s leaders about evolving threats. “My directors and I
deliver a quarterly board presentation, and we use Recorded
Future to make sure the pertinent information is all in the slide
deck we provide,” the CISO explains. “If our peers are being
attacked, we’re most likely being attacked, so it's extremely
important that we educate our board members on threatsagainst our company, as well as threats against the industry
and our customers and peers.”
Comprehensive insights also help guide strategic investments
in improving NOV’s layered cybersecurity defenses. Partneringwith Recorded Future keeps leaders from missing threats that
could result in reputational damage with those outside theindustry, such as potential investors and customers.

ABOUT RECORDED FUTURE
Recorded Future is the world’s largest intelligence company. Recorded Future’s cloud-based Intelligence Platform provides the most complete coverage across adversaries, infrastructure,and targets. By combining persistent and pervasive automated data collection and analytics with human analysis, Recorded Future provides real-time visibility into the vast digital landscapeand empowers clients to take proactive action to disrupt adversaries and keep their people, systems, and infrastructure safe. Headquartered in Boston with offices and employees around theworld, Recorded Future works with more than 1,400 businesses and government organizations across more than 60 countries. Learn more at recordedfuture.com.

www.recordedfuture.com@RecordedFuture© Recorded Future®, Inc. All rights reserved. All trademarks remain property of their respective owners.