Strengthening security for critical infrastructure
Understanding the challenge
South Australia Power Networks is a critical player in ensuring the delivery of electricity to over 1.7 million customers across South Australia. Given the essential nature of their services, SA Power Networks Group operates in an environment where security and compliance are not just priorities—they are necessities. To meet the stringent requirements of the Security of Critical Infrastructure (SOCI) Act and align with the Australian Energy Sector Cyber Security Framework (AESCSF), they needed to address a significant gap in its security controls. Specifically, they required an application control solution that could restrict unauthorised executables within their environment.
Recognising the urgency of this need, SA Power Networks Group initiated a search for the most suitable solution. After evaluating multiple options, they selected Airlock Digital as their preferred technology provider due to its specialised application control platform, which offered ease of deployment, operational efficiency, and robust security controls. Given the complexity and importance of the deployment, Airlock Digital recommended The Missing Link as the ideal partner to deliver and implement the solution.
A partnership built on expertise: The Missing Link and Airlock Digital
SA Power Networks Group’s decision to partner with The Missing Link and Airlock Digital was driven by the combination of The Missing Link’s proven ability to deliver large-scale security deployments and Airlock Digital’s leading application control technology. This collaborative approach provided SA Power Networks Group with the confidence they needed to meet their stringent security and compliance requirements.
Implementing a robust solution
The Missing Link and Airlock Digital worked closely together to deploy a comprehensive application control platform. The scope included designing and building the platform, developing baseline policies, and fine-tuning the system across various environments, including physical and virtual Windows desktops, Windows and Linux servers, and specialised IoT devices.
A key factor in the project’s success was the involvement of a knowledgeable technical stakeholder within SA Power Networks Group. This individual, with expertise in security and desktop support, was pivotal in ensuring the security controls implemented were practical and effective. Their insights helped bridge the gap between high-level security requirements and the technology's real-world application.
In addition to the platform’s technical capabilities, SA Power Networks Group standardised their workstation environment and restricted administrator rights on these devices. This standardisation brought consistency to the suite of applications being monitored and controlled, allowing for a smoother deployment process.
To further enhance security while maintaining operational flexibility, SA Power Networks Group applied risk-based policies for managing unsigned software applications. By making thoughtful policy decisions regarding common file path locations within the workstation environment, they maintained strong security controls without disrupting day-to-day operations.
“Working with SA Power Networks Group and The Missing Link on this project showcased how our application control platform can truly transform security outcomes. We’re proud of the results achieved and look forward to supporting them in the future.”
— Glenn Mahney, Head of Sales, Airlock Digital
Through close collaboration between The Missing Link, Airlock Digital, and SA Power Networks Group, the system was successfully transitioned to enforcement mode within just 14 weeks, despite the Christmas shutdown period. This rapid deployment demonstrated the strength of the partnership and the meticulous planning behind the implementation.
Delivering tangible results
The joint efforts of The Missing Link and Airlock Digital delivered significant results for SA Power Networks Group. By adopting a "deny by default" security posture, they drastically improved its overall security and ensured full compliance with critical regulations, including the SOCI Act and the AESCSF.
" The Missing Link’s expertise, paired with Airlock Digital’s cutting-edge platform, was instrumental in helping us meet our stringent security requirements. The combined effort ensured we had a tailored solution within a tight timeframe that met our compliance needs and set us up for future success."
— Alexander Duffy, Cyber Risk and IT Resilience Manager, SA Power Networks Group
Beyond regulatory compliance, this project laid a solid foundation for SA Power Networks Group to expand its security measures across the entire organisation. With the continued support of The Missing Link and Airlock Digital, SA Power Networks Group is already planning additional initiatives, such as penetration testing and further consulting services, to continue strengthening its cyber security framework.
A collaborative future
The partnership between SA Power Network, The Missing Link, and Airlock Digital is built on trust, open communication, and a shared commitment to excellence. As the energy sector continues to evolve, SA Power Networks Group is well-positioned to meet new security challenges, knowing they have the ongoing support and innovative solutions provided by both partners.
This collaboration highlights the power of combining cutting-edge technology with expert implementation. Together, The Missing Link and Airlock Digital have addressed SA Power Networks Group’s immediate security needs and also set the stage for long-term success and continued innovation in secure energy distribution.
