Energy · Polish private sector

The challenge

The group had security tooling but could not staff it, leaving most of the week uncovered, with NIS2 in scope.

What we did

We stood up 24/7 monitoring from Katowice, tuning detection rules and extending coverage to the OT boundary.

Results

• Pokrycie z godzin pracy na ciągłe, w tym granica OT po raz pierwszy
• Wolumen fałszywych alarmów niższy o około 64 procent po strojeniu
• Trzy realne incydenty wykryte i opanowane w pierwszym roku, wszystkie poza godzinami pracy
• Gotowość regulacyjna z udokumentowanej luki do udokumentowanej kontroli

Why it worked

The problem was never tooling; it was coverage, tuning and the ability to evidence both to a regulator.