From interconnected logistics to vendor management, there is always a vulnerability presence in the room. In today’s AI-driven age we run into vendor phishing attacks that near flawlessly mimic communication styles from normal trusted suppliers. This has required Teckrez to bolter security on the backend to account for such tactics. This has been approached from an A-Z method, all the way down to making a digital security fingerprint for every supplier to customer Teckrez employees communicate with. Over the past year and a half of building and testing this system I can safely say the effort put into it has been worth its weight in gold. This has been and is still currently protecting both ends of our business by identifying and reducing these AI-driven attacks from impacting day-to-day business.
Continuous Monitoring and Incident Response
The life of cyber security is always having a cautious security posture by assuming a breach will eventually occur. This is where here at Teckrez we focus on a rapid containment and resilience protocol. We maintain offline backups of all critical operational data, this ensures that in the event when the worst happens such as ransomware situations, we have isolated data backups so daily operations are minimally impacted. We also perform tabletop exercises yearly with things such as network outages to ensure the business can safely revert to secondary systems if required.
Protecting Proprietary Formulations and Regulatory Data
It’s no secret that everyone in the chemical industry deals with highly sensitive data from formulations to regulatory data. We enforce a zero-trust architecture across all company networks, this requires continuous authentication for any user attempting to access Teckrez databases. Segmentation of the company network is our normal practice here at Teckrez, which achieves two main goals. Compliance documentation is separated away from the normal business areas, and most importantly mitigation of lateral movement for attackers when a breach occurs. Last but not least we have a fully automated data loss prevention tool that flags and blocks any anomalous bulk downloads or external transfer of company data.
Thanks for taking time out of your day to read into the technical side of things, so keep yourself safe on the digital end and stay vigilant!
By Brad Misuraca
IT & Data Administrator