Cyber Security at the Rio 2016 Olympic Games
Cyber Security at the Rio 2016 Olympic Games
| Olympic Games Presentation | © Atos 2
What is behind Rio 2016
Equivalent to a business of 200,000 employees, addressing 4 billion customers, operating 24/7, in a new territory, every 2 years
Customer Experience Trust & Compliance
4BN Worldwide viewers
37 Competition venues with complete IT infrastructure
300,000 + Accreditations
23,000 Media
10,500 + Athletes
0 IT security impact
| Olympic Games Presentation | © Atos 3
Games management over four-year-lifecycle
Supporting Rio 2016 to recruit up to
50,000
volunteers
Volunteer portal
Sport entries & qualifications
Collects and processes data for
each of the
10,500 athletes eligible to
compete in the Games
Accreditation
Identifies accredited participants,
manages registration, assigns access privileges and
provides access control information
for 300,000
people
Workforce management
At work long before the Games start, support the HR
departments with all functions needed for
managing interviewing and training staff and
volunteers
Games Management System
| Olympic Games Presentation | © Atos 4
Provide results and data to the world in real-time
Information Diffusion System
On Venue Results
Venue Commentator Information
System (CIS)
Timing & Scoring
TV Audience
Central
Remote
Central Systems
Internet Websites
World News Press Agencies
Broadcasts & IFs
Printed Reports
Info +
Remote CIS MyInfo +
Dis
trib
ute
d
Printing
Commentator Information System
Scoreboard/ Video board
| Olympic Games Presentation | © Atos 5
Sorry! Can you do it again?
We were rebooting…
| Olympic Games Presentation | © Atos 6
Information security when the world is watching
Bringing together people, processes and technology
Program Management
Critical Games Applications
Systems Integration
Application & Systems Mgmt
Operations Management
IT Security Cloud Services
Availability Integrity Accuracy
Availability Integrity
Data Privacy Confidentiality Integrity
Availability Integrity Confidentiality
Availability Integrity
Timing and Scoring Systems
• Real Time Applications (Scoreboard, Timing and Scoring…)
Information Diffusion Systems
• Near Real Time
• Feed to Press & Broadcasters
• Remote Services
Games Management Systems
• Olympics Resource Planning Applications
•Accreditations, Sports Entries…
OCOG Applications
• Non-Core Games Management Systems
• Administration Services for Organizing Committee of Olympic Games
Internet Facing Applications
• Web Sites
• Olympic Video Player
| Olympic Games Presentation | © Atos 7
Implementation process and methodology
Understand Business
Requirements
Define asset criticality
Define Security Metrics
Identify « normal » Behavior
UNDERSTAND
Evaluate the Risk (scenario-based)
ANALYZE BUILD
Integrate Technology to
enforce Security Controls
Segment the Network
Define Security Domains
MEASURE
RUN
Measure Security Posture Audit
Assess Vulnerability
Detect « abnormal »
Behavior Respond to Incidents
Centralized Authentication / Local
Management
| Olympic Games Presentation | © Atos 8
| Olympic Games Presentation | © Atos 9 9
570 000 000 Raw Events
3 810 000 Correlated
Events
22 477 Alerts
905 Tickets
322 000 000 Raw Events
1 100 000 Correlated
Events
8 936 Alerts
182 Tickets
0 Security incidents 0 Security incidents
Rio 2016 Sochi 2014
Security in action
Atos, the Atos logo, Atos Codex, Atos Consulting, Atos Worldgrid, Worldline, BlueKiwi, Bull, Canopy the Open Cloud Company, Unify, Yunano, Zero Email, Zero Email Certified and The Zero Email Company are registered trademarks of the Atos group. © 2017 Atos. Confidential information owned by Atos, to be used by the recipient only. This document, or any part of it, may not be reproduced, copied, circulated and/or distributed nor quoted without prior written approval from Atos.
Thank You!