Cavipetrol is the entity responsible for providing services to the employees and retirees of the state-owned oil company Ecopetrol—Colombia’s largest company.
The Corporation, established in 1962, is a private, nonprofit organization with more than 12,000 members, 60% of whom are retirees from the Colombian Petroleum Company and 40% of whom are active employees.
Cavipetrol is headquartered in Bogotá and has 12 branches located throughout the country, which house its 260 workstations and 220 users.
This organization maintained minimal (but insufficient) controls for the
management of files on removable devices and Wi-Fi connections.
“We generated audit reports using various security tools and focused on compliance with industry regulations, particularly Circular 052 issued by the Financial Superintendency; however, we had no guarantee that we were 100 percent protected, which meant we had to spend more time monitoring policy compliance and preventing cyberattacks”: Jairo Bravo, Director of Technology, IT, and Operations at Cavipetrol.
“Cavipetrol currently uses a comprehensive suite of Aranda solutions that has enabled it to manage and implement best practices in IT management. These solutions are primarily characterized by their robustness, scalable architectures, and user-friendliness, which have become key factors in evaluating the products implemented within the Corporation.”
Jairo Bravo
Director of Technology, IT, and Operations.
Protecting an organization's IT resources does not depend on a single solution, but rather on the ability to structure and integrate various tools in such a way that they meet all security requirements.
Cavipetrol currently uses several Aranda Software solutions to manage its IT infrastructure. Although it was able to control its IT resources, it had not fully succeeded in protecting the company’s critical information from internal misuse or external attacks (such as viruses, Trojans, and malicious actions, among others). In other words, the company needed to strengthen its IT security model to ensure better performance through reliable protection of its IT resources.
For this reason, Aranda 360 Endpoint Security was implemented to complement the organization’s existing infrastructure (policies and processes), and rules and blacklists that other tools do not offer have been gradually added. In this way, Cavipetrol has built a comprehensive security framework that has proven effective, made possible by A360’s compatibility with the rest of the solutions.
“Aranda has always provided qualified personnel for the solutions it offers. The implementation process for Aranda 360 was always supported by an external consultant specializing in this solution, who not only provided high-quality service but also offered ideas that have enabled us to make the best use of the tool to achieve optimal results,” said Cavipetrol’s Director of Technology and Information Systems.
Cavipetrol now has full control over various removable storage devices, such as USB drives, digital cameras, MP3 players, and removable disks, managing access to them through access policies or restrictions.
This organization has been able to strengthen its existing security policies and meet the objectives set at the start of the Aranda 360 implementation, thanks to the reports generated from the agent monitoring logs.
This organization has now implemented filters for network communications, blocking extensions that are classified as high-risk for spreading viruses and that also consume significant system resources (thereby reducing performance).
Cavipetrol can now protect its systems from potential memory overflows caused by Trojans and from reboots triggered by intruders. Additionally, it provides alerts regarding excessive CPU usage, allowing us to take proactive measures. “Day by day, cyber threats have increased and spread at an ever-faster pace, generating attacks whose primary objective is the theft of money and confidential information—assets that are critical to organizations like ours. For this reason, strengthening IT security tools, such as Aranda 360 Endpoint Security, helps us ensure better performance through reliable protection of IT resources, primarily information,” said Jairo Bravo.