Digitally safeguarding the skies with Unit 42

SUMMARY

Five million passengers fly with EL AL Israel Airlines every year to more than 55 destinations worldwide. Israel’s flag carrier airline, and its largest, EL AL flies an all-Boeing fleet and has an operating income of $2.5 billion. Though its stringent ground and in-flight security standards had enabled EL AL to provide innovative new services for years, increasing cyberattacks left the company's leaders with resilience concerns. To enhance its cybersecurity programme across its global operations, EL AL turned to Palo Alto Networks Unit 42 Managed Detection and Response.

RESULTS

4 minutes MTTR

where previously response took weeks

3 weeks

to operationalise complete, connected protection across 5,500 endpoints

24/7 cybersecurity

enables millions of passengers to travel with confidence
CHALLENGE
  • EL AL experienced six billion cyberattacks in just one hour during one month last year, emphasising its need to be continually vigilant and secure.
  • Fragmented visibility made it harder to understand the entire telemetry of an incident and rapidly mitigate the problem.
  • Their small security team struggled to monitor and control all endpoints in 55 locations worldwide.

"If you want traditional cybersecurity, Palo Alto Networks probably isn’t for you. They are so much more than that. With Palo Alto Networks you can see beyond the core, proactively manage cyber risk and create an intelligence-driven, response-ready organisation. "

Chen Amram

Director of Security and Infrastructure, EL AL

SOLUTION

Digitally safeguarding the skies

EL AL engaged with Palo Alto Networks to transform its business resilience. Palo Alto Networks Unit 42 Managed Detection and Response (MDR), a managed service built on Cortex XDR, provides 24/7/365 monitoring, expertise, threat hunting, and remediation of threats. Unit 42 MDR is used to continually monitor and strengthen the airline’s security controls to reduce the likelihood of a successful attack. The Unit 42 Retainer also puts incident response experts on speed dial should an incident occur.

Cortex XDR automates data collection across EL AL’s 5,500 endpoints, providing the critical insight and context needed to block attacks before they can impact the airline’s operations. Cortex XDR’s endpoint-based approach to security safeguards 6,000 users from every type of threat.

“Compared with other solutions, Unit 42 gives us eyes on everything. During the evaluation, Unit 42 delivered the best detection and active prevention results. We could see the entire telemetry of an incident, using that root cause analysis to rapidly mitigate the problem,” says Chen Amram, Director of Security and Infrastructure, EL AL.

Unit 42 regularly performs threat-hunting activities to assess the cyber hygiene of EL AL’s environment. The goal of these activities is to identify and mitigate potential external threats, network abuse, system modifications, and security bypasses. “We’ve significantly reduced the time it takes to identify and respond to threats,” says Tsofit Schacher, Global CISO, EL AL.

The Unit 42 MDR team also shares reports on cyber hygiene findings and recommendations, enhancing EL AL’s security posture. “Unit 42 is highly professional. They understand our environment and our security objectives. They work as an extension to our team, helping us to prepare for and respond to the most challenging threats. They think differently to other security partners,” says Chen.

Cortex XDR safeguards EL AL’s endpoints and servers worldwide, stopping attacks on the airline’s operations with full visibility and analytics. “We’re confident that XDR has played a pivotal role in making EL AL the most secure airline in the world,” says Tsofit.