Schlumberger

• case

General Information

Schlumberger
Schlumberger is the world's leading oilfield services company supplying technology, information solutions and integrated project management that optimize reservoir performance for customers working in the oil and gas industry. The company employs more than 70,000 people of over 140 nationalities working in approximately 80 countries. Schlumberger supplies a wide range of products and services from seismic acquisition and processing; formation evaluation; well testing and directional drilling to well cementing and stimulation; artificial lift and well completions; and consulting.

BR Distribuidora
Established in 1971, BR Distribuidora is a subsidiary of Petróleo Brasileiro S.A. - Petrobras and manages the sale and distribution of petroleum derivatives throughout Brazil. Since the company's rapid development in 1974, its third year of operations, it has been the largest oil derivatives distributor in the country. They are very competitive with all the other national distribution companies, including Brazilian and foreign competition.

Petrobras Distribuidora is closely affiliated with the Ministry of Mines and Energy and classified as one of the entities indirectly administered by the Federal Government. It distributes, sells, manufactures, imports and exports oil and oil derivative products.

The company leads several of the segments in which it operates, and is a pioneer in the distribution and sale of bio-diesel fuels in Brazil. They have invested more than R$ 20 million to adapt its facilities and logistics for receiving and distributing this type of fuel. In the next 5 years Petrobras Distribuidora is projected to grow even more, with an estimated investment of R$ 2.9 billion.

Project Scope

Schlumberger was selected as a result of a competitive bidding process to conduct a security audit in BR Distribuidora's IT area. This area of BR Distribuidora centralizes all of the company's operations throughout Brazil. Schlumberger decided to use Modulo Risk Manager, a risk management and compliance system, for the security audit. The project involved the following tasks:

• Evaluation and analysis of the IT environment
  
• Emergency security implementations
  
• Communicating and elevating the corporate awareness of information security policies and procedures
  
• Ensuring compliance with market regulations

Client’s Needs

• Analysis of the IT environment as a whole to understand the company's current security and risk situation
  
• Compliance with IT market and governance rules and regulations (COBIT)
  
• Treatment of high risk vulnerabilities

Solution implemented

Information security consulting based on a methodology developed by Schlumberger (SMA) that uses the Modulo Risk Manager tool.

Benefits

• Greater flexibility in conducting risk analyses
  
• 50% reduction in the time required for carrying out the risk analyses
  
• Automation of several tasks previously performed by the consultant involving the collection of information and generation of reports
  
• Since data is collected automatically, there is more time for careful analysis and interpretation of information
  
• Development of new knowledge bases for future project needs