CASE STUDY (TRIPWIRE)

Fortune 250 Electric & Gas Utility Trusts
Tripwire for Unbeatable Accuracy
AT-A-GLANCE

Scalable, Automated NERC CIP ComplianceElectric and gas utilities and other industrial organizations take solutionIndustry

Electric & Gas Utilities

procurement seriously because they know what’s at stake if they fail a North

Headcount

10,000+American Electric Reliability Corporation Critical Infrastructure Protection(NERC CIP) or a TSA pipeline security audit, or become the target of acyberattack. With many cybersecurity and compliance solutions to choose
from, it can be hard to know where to start. So why did one Fortune 250 Energy
Company select Fortra’s Tripwire solution suite for their 1,000+ NERC CIP assets,
2,000 IP addresses, and thousands of industrial assets?
Following a challenging NERC CIP audit, this energy company determined
it needed an automated, industry-standard solution to reduce compliancerisk and manual efforts. They needed solutions that could accurately
handle monthly configuration baselining of the assets for NERC CIP-010 R1and R2, perform discovery for all unauthorized changes, and achieve 90%+automation.  
For security configuration management (SCM) and baselining, their previous
solution was too cumbersome to manage. It wasn’t scalable and did notdeliver on the automation capabilities that were originally promised. The
process was too manual, and the solution required a lot of continuousattention. For vulnerability management and asset discovery, there weredifficulties with scanning extremely sensitive control systems using a cloudbased solution that had negative consequences to the control systems. The
existing reporting tool was also difficult to use, with too much data and notenough prioritization.
Like many customers migrating to Tripwire, they attributed their decision
based largely on experiencing inaccurate results as compared to Tripwire forsoftware changes, version changes, install dates, ports and services reporting,and monitoring “new” asset types for NERC CIP. They made the decision totransition because of Tripwire’s solution approach and trusted leadership inthe energy and industrial control systems market.

Fortra.com

Customer Since 2016
KE Y S O L U T I O NSTripwire® Enterprise, Tripwire IP360™,Tripwire State Analyzer, Tripwire
LogCenter®
B U S I NE S S NE E D S• Highly accurate compliance data for
NERC CIP, the TSA Directive, and PCI• Increased granularity of change
detection process• Defined baseline configurations
for components across the entire
infrastructure• Enterprise scalability beyond
industrial control systems
RESULTS• Granularity of detail in reports• Time savings from automation
capabilities• Deep integration with the company’sother existing security hardware andsoftware• Broad and deep continuous
monitoringFortra Case Study

Fortune 250 Electric & Gas Utility

Following the success of the Tripwire deployment for NERC

solution in the context of the environment, and capture all

CIP compliance, this customer has continued to expand theof this in a detailed document deliverable. The Design &use cases of Tripwire to address the TSA Directive for its gas

Architecture Engagement helped this company overcome

assets, its IT assets for PCI compliance, and its Distribution

prior experiences with other projects that were not properly

Operations assets for industrial cybersecurity.

scoped and resulted in expensive re-design work.

Business Needs• Highly accurate compliance data for NERC CIP, the TSA
Directive, and PCI• Increased granularity of change detection processto avoid any unplanned or significant remediation
challenges• Defined baseline configurations for components across“Tripwire has easier extendedcoverage. Tripwire supports
protocols, not specific devices,
so it is easier to extend what
Tripwire is covering.”

the entire infrastructure, including devices and otherendpoints• Enterprise scalability beyond industrial control systems;

Results

In addition to the added automation capabilities, thisability to cover both OT (Operational Technology) and IT

company’s time is now better spent analyzing its data(Information Technology) with a single solution 	 rather than manual efforts required by its previous solutions.
Tripwire’s rich integration ability made it easy for thisTripwire Solutions

Tripwire offers truly scalable and easy-to-use solutions thatare automated and have deep visibility, risk prioritization,and reporting capabilities. Tripwire Enterprise is theleading compliance monitoring solution, using file integrity
monitoring (FIM) and security configuration management(SCM). Backed by decades of experience, it’s capable ofadvanced use cases unmatched by other solutions in bothIT and OT environments. For vulnerability management,
industrial organizations use Tripwire IP360 to get complete
visibility into their networks, including all devices andtheir associated operating systems, applications, andvulnerabilities.  

company to not only fully integrate Tripwire but also its otherexisting security hardware and software. With Tripwire, thisenergy company can build enterprise scalability beyond
industrial control systems that covers both IT and OT
environments with a single solution.  
The following results were achieved quickly upon
implementing their Tripwire solutions:• Granularity of detail in reports including the Tripwire
IP360 heat map and risk prioritization  • Time savings from automation capabilities: time is now
better spent analyzing the data rather than on manual
efforts required of their previous solution

To help with defining the project scope, schedule,
requirements and cost estimate, Tripwire and the customer
conducted a Professional Services Design & Architecture
Engagement to thoroughly cover all the applicabletechnology with stakeholders, map the technology to a real

• Deep integration with the company’s other existing
security hardware and software• Broad and deep continuous monitoring, plus highflexibility to easily configure monitoring of one-offassets

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

(fta-tw-ca-0523-r1-hm)