Supreme Committee for Delivery & Legacy safeguards the World Cup Qatar 2022 tournament

The Supreme Committee for Delivery & Legacy was established by the State of Qatar in 2011 to deliver World Cup Qatar 2022’s infrastructure – including transport, accommodation, and the provisioning and operation of the event’s eight stadiums – and support the event’s legacy into the future. “Legacy” is a key word in the Supreme Committee for Delivery & Legacy constitution – from infrastructure and education to support for regional innovation, the Supreme Committee for Delivery & Legacy is forging a better future for Qatar and the Middle East.

World Cup Qatar 2022 was a breathtaking event. More than 1.5 million fans attended across eight stadiums including the showcase 60,000-seat Al Bayt Stadium, and, thanks to Qatar’s size, fans were able to watch multiple matches in one day. A world-class event of such magnitude required excellence at every stage of its preparation process.

Supreme Committee for Delivery & Legacy’s primary goal was to set a new standard in World Cup infrastructure – at every level.

Supreme Committee for Delivery & Legacy’s commitment to that standard of excellence extended to the stateof-the-art cybersecurity infrastructure installed for the tournament stadiums, which spanned everything from internet of things (IoT) and stadium Wi-Fi to industrial control systems and cybersecurity operations. Setting a new cybersecurity standard for a major worldwide tournament was an opportunity that the Supreme Committee for Delivery & Legacy embraced with enthusiasm.

Palo Alto Networks was one of the trusted partners chosen to deliver this ground-breaking stadium cybersecurity strategy. Supreme Committee for Delivery & Legacy’s Manager, Information Security, Kamran Shah, says, “We needed multiple, connected sources of intelligence across a wide landscape. Palo Alto Networks is totally focused on information security. It has made forward-thinking business acquisitions, and its people are continually innovating. Palo Alto Networks has a 360-degree presence across our stadium security requirements and was one of the most important partners for World Cup Qatar 2022 stadiums.”

The Supreme Committee for Delivery & Legacy identified that the Qatar World Cup 2022 stadium cybersecurity strategy needed to:

• Offer resilient, high availability, high-performance digital services to fans, players, and staff participants.
• Leverage intelligence to prevent, detect, and respond to cybersecurity events, thereby eliminating risk and inspiring confidence.
• Enable a Zero Trust architecture.
• Deliver modern, state-of-the-art cybersecurity technologies, including threat intelligence, artificial intelligence, and automation.

A complete, unified Palo Alto Networks portfolio provided World Cup Qatar 2022 stadiums with simple, automated, intelligent cybersecurity. The portfolio spanned network, endpoint, and cloud security – backed by modern threat intelligence, AI, and automation.

Network security

A connected suite of more than 100 ML-Powered Next-Generation Firewalls (NGFWs) protected the event’s physical and virtual networks. Innovative features included the machine learning (ML) used by the NGFWs to protect the network; zero-delay network updates; and accurate identification of IoT devices, such as stadium digital signage and pitch irrigation systems.

Subscription-based Cloud-Delivered Security Services (CDSS), Advanced Threat Prevention, WildFire, GlobalProtect, Advanced URL Filtering, and DNS Security complemented the network security strategy. Together, they delivered best-in-class comprehensive coverage without compromising NGFW performance.

Endpoint security

An integrated Cortex XDR platform protected all endpoints and servers both in and beyond the stadiums, applying ML to network, endpoint, and cloud data. Simultaneously, Strata Logging Service (formerly known as Cortex Data Lake) collected and integrated the security data, continually learning to evolve the event’s defences.

Cortex XSOAR correlated events from more than 30 integrations, orchestrating operational response in the World Cup Qatar 2022 Security Operations Centre (SOC). From a single screen, three Resident Engineers and teams from Unit 42 and Cortex Threat Research were able to monitor every system in all eight stadiums – from the security of the temperature-controlling operational technology (OT) systems to the impressive Wi-Fi services.

Cloud security

An intelligent Cloud Security Posture Management (CSPM) platform – Prisma Cloud – correlated Supreme Committee for Delivery & Legacy’s cloud assets. The team had complete visibility across the environment, enabling them to eliminate blind spots, improve threat detection, and automate response. By providing Supreme Committee for Delivery & Legacy with full visibility into container dependencies, Prisma Cloud also eliminated vulnerabilities in legacy containers.

Management and testing

The Supreme Committee for Delivery & Legacy partnered with Unit 42 to undertake a Palo Alto Networks Compromise Assessment of all assets, including OT workstations, services, and IT systems. Penetration testing, for example, was regularly conducted to test security controls on the infrastructure, including key areas such as IoT security cameras and digital stadium signage. The Unit 42 team also performed Compromise Assessments for all assets, including OT workstations and servers.

Threat intelligence and incident response

An integrated portfolio of cyber risk management and incident response services was used to discover potential compromises, understand their impacts, and provide mitigation recommendations. Data mining, for example, was used to quantify sensitive data that would be at risk in the event of a data breach, including personal health information (PHI), personally identifiable information (PII), payment card industry data (PCI) data.

The Supreme Committee for Delivery & Legacy strategy, created in collaboration with Palo Alto Networks, safeguarded data before, during, and after World Cup Qatar 2022. This ensured the whole world was able to watch an exciting and spectacular football tournament while benefitting from world-class cybersecurity protection. It also meant that Supreme Committee for Delivery & Legacy could:

• Deliver efficient security: Security automation and intuitive functionality streamlined everyday security management, strengthened resilience, and released Supreme Committee for Delivery & Legacy resources to focus on strategic tasks. XSOAR, for example, automated security response, orchestrating and integrating data from more than 30 third-party tools.

• Trusted devices: As Palo Alto Networks solutions – including a Zero Trust architecture – delivered maximum protection, Supreme Committee for Delivery & Legacy could confidently rely on network, hybrid cloud, endpoints, IoT, OT, and all other devices.
• Trusted proven delivery: This Palo Alto Networks portfolio deployment was previously tested by Supreme Committee for Delivery & Legacy during the Arab Cup 2021. According to Kamran Shah, “The stadium security solutions and strategy worked flawlessly at both the Arab Cup 2021 and during the World Cup Qatar 2022, consistently protecting both events.”
• Proactive threat intelligence: Unit 42 provided a continuous flow of real-time threat intelligence in advance of and throughout the tournament, enabling Supreme Committee for Delivery & Legacy security professionals to do their jobs with maximum efficiency to ensure a safe, exciting, and inspirational event.

Read how Unit 42 partnered with Supreme Committee for Delivery & Legacy to deliver robust and resilient stadium security at World Cup Qatar 2022. Discover how the Cortex platform became the central nervous system of the stadium Security Operations Centre.