Case Study

Supreme Committee for Delivery & Legacy safeguards the World Cup Qatar 2022 tournament

In brief

Customer

Supreme Committee for Delivery & Legacy

Organisation Size

Eight stadiums, 1.5 million visitors and watched by five billion people

Featured Products and Services

Hosted operations for World Cup Qatar 2022

Industry

Sport

Challenges

Deliver a complete, connected cybersecurity strategy for the tournament stadiums, to ensure millions of people could attend World Cup Qatar 2022 with confidence.

Requirements

  • Ensure resilient, high availability, high-performance digital services to all event participants.
  • Enable a Zero Trust architecture.
  • Leverage threat intelligence, artificial intelligence (AI), and automation.

Solution

This innovative solution used the Palo Alto Networks portfolio including:

  • ML-Powered Next-Generation Firewalls, Cloud-Delivered Security Services including DNS Security, GlobalProtect, Advanced URL Filtering, Threat Prevention, and WildFire
  • Cortex Platform consisting of Cortex XDR, Cortex XSOAR, Cortex XSOAR Threat Intel Management, and Cortex Threat Research Team
  • Prisma Cloud
  • Unit 42® for Threat Intelligence, Threat Hunting, Security Risk Assessment, and Incident Response
  • Architects and Resident Engineers
Introduction

The Supreme Committee for Delivery & Legacy was responsible for the infrastructure and operations of World Cup Qatar 2022. In order to achieve its goal of delivering an innovative cybersecurity strategy for the event, they standardised on a complete, integrated Palo Alto Networks security portfolio for the stadiums’ cybersecurity. This modern cybersecurity strategy ensured millions of fans, players, and staff were able to enjoy the world’s most spectacular soccer competition with pride and confidence.

The world’s largest sporting event

The Supreme Committee for Delivery & Legacy was established by the State of Qatar in 2011 to deliver World Cup Qatar 2022’s infrastructure – including transport, accommodation, and the provisioning and operation of the event’s eight stadiums – and support the event’s legacy into the future. “Legacy” is a key word in the Supreme Committee for Delivery & Legacy constitution – from infrastructure and education to support for regional innovation, the Supreme Committee for Delivery & Legacy is forging a better future for Qatar and the Middle East.

World Cup Qatar 2022 was a breathtaking event. More than 1.5 million fans attended across eight stadiums including the showcase 60,000-seat Al Bayt Stadium, and, thanks to Qatar’s size, fans were able to watch multiple matches in one day. A world-class event of such magnitude required excellence at every stage of its preparation process.

Supreme Committee for Delivery & Legacy’s primary goal was to set a new standard in World Cup infrastructure – at every level.

"As the host of the World Cup Qatar 2022, this was a unique opportunity for Qatar to showcase innovative, integrated security technologies across our stadiums to deliver a safe, smart, and exciting tournament."

–Niyas Abudlrahiman

Executive Director – Tournament ICT, Supreme Committee for Delivery & Legacy

Supreme Committee for Delivery & Legacy’s commitment to that standard of excellence extended to the stateof-the-art cybersecurity infrastructure installed for the tournament stadiums, which spanned everything from internet of things (IoT) and stadium Wi-Fi to industrial control systems and cybersecurity operations. Setting a new cybersecurity standard for a major worldwide tournament was an opportunity that the Supreme Committee for Delivery & Legacy embraced with enthusiasm.

Palo Alto Networks was one of the trusted partners chosen to deliver this ground-breaking stadium cybersecurity strategy. Supreme Committee for Delivery & Legacy’s Manager, Information Security, Kamran Shah, says, “We needed multiple, connected sources of intelligence across a wide landscape. Palo Alto Networks is totally focused on information security. It has made forward-thinking business acquisitions, and its people are continually innovating. Palo Alto Networks has a 360-degree presence across our stadium security requirements and was one of the most important partners for World Cup Qatar 2022 stadiums.”

"We needed multiple, connected sources of intelligence across a wide landscape. Palo Alto Networks has a 360-degree presence across our stadium security requirements and was one of the most important partners for World Cup Qatar 2022."

–Kamran Shah

Manager, Information Security, Supreme Committee for Delivery & Legacy

REQUIREMENTS

A new required standard for World Cup stadium cybersecurity

The Supreme Committee for Delivery & Legacy identified that the Qatar World Cup 2022 stadium cybersecurity strategy needed to:

  • Offer resilient, high availability, high-performance digital services to fans, players, and staff participants.
  • Leverage intelligence to prevent, detect, and respond to cybersecurity events, thereby eliminating risk and inspiring confidence.
  • Enable a Zero Trust architecture.
  • Deliver modern, state-of-the-art cybersecurity technologies, including threat intelligence, artificial intelligence, and automation.
SOLUTION

Modern, connected cybersecurity

A complete, unified Palo Alto Networks portfolio provided World Cup Qatar 2022 stadiums with simple, automated, intelligent cybersecurity. The portfolio spanned network, endpoint, and cloud security – backed by modern threat intelligence, AI, and automation.

Network security

A connected suite of more than 100 ML-Powered Next-Generation Firewalls (NGFWs) protected the event’s physical and virtual networks. Innovative features included the machine learning (ML) used by the NGFWs to protect the network; zero-delay network updates; and accurate identification of IoT devices, such as stadium digital signage and pitch irrigation systems.

Subscription-based Cloud-Delivered Security Services (CDSS), Advanced Threat Prevention, WildFire, GlobalProtect, Advanced URL Filtering, and DNS Security complemented the network security strategy. Together, they delivered best-in-class comprehensive coverage without compromising NGFW performance.

Endpoint security

An integrated Cortex XDR platform protected all endpoints and servers both in and beyond the stadiums, applying ML to network, endpoint, and cloud data. Simultaneously, Strata Logging Service (formerly known as Cortex Data Lake) collected and integrated the security data, continually learning to evolve the event’s defences.

Cortex XSOAR correlated events from more than 30 integrations, orchestrating operational response in the World Cup Qatar 2022 Security Operations Centre (SOC). From a single screen, three Resident Engineers and teams from Unit 42 and Cortex Threat Research were able to monitor every system in all eight stadiums – from the security of the temperature-controlling operational technology (OT) systems to the impressive Wi-Fi services.

Cloud security

An intelligent Cloud Security Posture Management (CSPM) platform – Prisma Cloud – correlated Supreme Committee for Delivery & Legacy’s cloud assets. The team had complete visibility across the environment, enabling them to eliminate blind spots, improve threat detection, and automate response. By providing Supreme Committee for Delivery & Legacy with full visibility into container dependencies, Prisma Cloud also eliminated vulnerabilities in legacy containers.

Management and testing

The Supreme Committee for Delivery & Legacy partnered with Unit 42 to undertake a Palo Alto Networks Compromise Assessment of all assets, including OT workstations, services, and IT systems. Penetration testing, for example, was regularly conducted to test security controls on the infrastructure, including key areas such as IoT security cameras and digital stadium signage. The Unit 42 team also performed Compromise Assessments for all assets, including OT workstations and servers.

Threat intelligence and incident response

An integrated portfolio of cyber risk management and incident response services was used to discover potential compromises, understand their impacts, and provide mitigation recommendations. Data mining, for example, was used to quantify sensitive data that would be at risk in the event of a data breach, including personal health information (PHI), personally identifiable information (PII), payment card industry data (PCI) data.

BENEFITS

World-class security for World Cup Qatar 2022

The Supreme Committee for Delivery & Legacy strategy, created in collaboration with Palo Alto Networks, safeguarded data before, during, and after World Cup Qatar 2022. This ensured the whole world was able to watch an exciting and spectacular football tournament while benefitting from world-class cybersecurity protection. It also meant that Supreme Committee for Delivery & Legacy could:

  • Deliver efficient security: Security automation and intuitive functionality streamlined everyday security management, strengthened resilience, and released Supreme Committee for Delivery & Legacy resources to focus on strategic tasks. XSOAR, for example, automated security response, orchestrating and integrating data from more than 30 third-party tools.

"Cortex XSOAR was the central nervous system of our stadium cybersecurity monitoring, correlating data from Palo Alto Networks and more than 30 different third-party tools."

–Kamran Shah

Manager, Information Security, Supreme Committee for Delivery & Legacy

  • Trusted devices: As Palo Alto Networks solutions – including a Zero Trust architecture – delivered maximum protection, Supreme Committee for Delivery & Legacy could confidently rely on network, hybrid cloud, endpoints, IoT, OT, and all other devices.
  • Trusted proven delivery: This Palo Alto Networks portfolio deployment was previously tested by Supreme Committee for Delivery & Legacy during the Arab Cup 2021. According to Kamran Shah, “The stadium security solutions and strategy worked flawlessly at both the Arab Cup 2021 and during the World Cup Qatar 2022, consistently protecting both events.”
  • Proactive threat intelligence: Unit 42 provided a continuous flow of real-time threat intelligence in advance of and throughout the tournament, enabling Supreme Committee for Delivery & Legacy security professionals to do their jobs with maximum efficiency to ensure a safe, exciting, and inspirational event.

"Palo Alto Networks has a mature cybersecurity portfolio that’s consistently ahead of the curve. The people are on top of their game and strategically advise us as we innovate for the future. We designed the security strategy to secure the World Cup Qatar 2022 stadiums in collaboration with Palo Alto Networks because we trust them. With these technologies and inspiring people, the world was able to enjoy a safer, smarter World Cup in 2022."

–Niyas Abudlrahiman

Executive Director – Tournament ICT, Supreme Committee for Delivery & Legacy

Read how Unit 42 partnered with Supreme Committee for Delivery & Legacy to deliver robust and resilient stadium security at World Cup Qatar 2022. Discover how the Cortex platform became the central nervous system of the stadium Security Operations Centre.