Phoenix Petroleum Partners With Check Point To Efficiently Manage And Mitigate External Cyber Risks

INDUSTRY HEADQUARTERS COMPANY SIZE

Energy Davao City, Philippines 1,000 + employees

OVERVIEW OUR SOLUTION

Phoenix Petroleum started as a family business in 2002 in the southern Philippines and has since grown into a thriving nationwide network of retail and commercial channels, with a diverse product line that services both individual and industrial clients.

CHALLENGE

Phoenix Petroleum’s rapid rise as a key oil company in the Philippines led to a much greater number of digital assets, a larger attack surface, and an increased level of cyber risk to manage. The challenge is that the attack surface is constantly evolving, and so is the threat landscape. New digital assets are created and deployed, and new CVEs are discovered in up-to-date software. Meanwhile, threat actors develop new TTPs and launch new attack campaigns. Staying ahead of all these risks is a difficult project that requires continuous vigilance, cyber expertise, mature processes, and innovative technologies.

We looked at some other vendors and they have good solutions, but we needed more than what they could offer. With Infinity ERM, I can continuously monitor not only all of Phoenix Petroleum’s domains, but all our digital assets, plus we get relevant intelligence from the deep and dark web.

Roland Villavieja, Information Security Officer at Phoenix Petroleum

SOLUTION

Like all large enterprises, Phoenix Petroleum is sometimes impersonated by cyber criminals who seek to profit from illegal scams. These attacks include everything from lookalike domains and phishing sites that mimic Phoenix Petroleum’s legitimate website to fraudulent social media profiles that masquerade as an official account or as members of the executive leadership team. “Infinity External Risk Management (ERM) was able to detect impersonation on social media of members of our senior management team – and they were very surprised to see these fraudulent profiles,” said Roland Villavieja, Information Security Officer at Phoenix Petroleum. “It’s very difficult to identify fraudulent social media profiles like those unless you have a solution like Infinity ERM.”

OUTCOME

As a major energy producer, Phoenix Petroleum has many domains and IP addresses to monitor and manage. With the attack surface constantly shifting—new assets being deployed, new software and services getting installed on existing assets, and new risks coming to light—an automated solution is essential. With Infinity ERM, Phoenix Petroleum can continuously map out the attack surface, check assets for potential issues, and receive real-time alerts for major risks that require immediate action. Infinity ERM creates a full inventory of both assets and the technologies visible in the external attack surface. Risk severity levels are assigned to each asset for simplified prioritization and remediation. The cyber security team at Phoenix Petroleum is managing several priorities: standing up new cyber technologies, achieving compliance with major frameworks, and staying ahead of an increasingly hostile threat landscape. Check Point recognizes that many cyber security teams are short on time and resources, but long on tasks and projects. To help cyber teams better manage the workload and reduce risk, the Infinity ERM solution was designed for efficiency.

One of the things I like is that Infinity ERM checks whether my external assets are vulnerable from an attacker’s point of view. So, for example, when a new CVE is discovered, I know immediately if I have that vulnerability in my attack surface and I can access threat intelligence on that CVE.

Roland Villavieja, Information Security Officer at Phoenix Petroleum

“Infinity ERM gives me confidence and helps me sleep easy at night because I know someone is constantly monitoring our digital assets. This frees up my time to focus on other priorities,” said Phoenix Petroleum’s Information Security Officer Roland Villavieja.

ABOUT CHECK POINT

Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading AI-powered, cloud-delivered cyber security platform provider protecting over 100,000 organizations worldwide. Check Point leverages the power of AI everywhere to enhance cyber security efficiency and accuracy through its Infinity Platform, with industry-leading catch rates enabling proactive threat anticipation and smarter, faster response times. The comprehensive platform includes cloud-delivered technologies consisting of Check Point Harmony to secure the workspace, Check Point CloudGuard to secure the cloud, Check Point Quantum to secure the network, and Check Point Infinity Core Services for collaborative security operations and services.