The Supreme Committee for Delivery & Legacy was responsible for the infrastructure and operations of World Cup Qatar 2022. In order to achieve its goal of delivering an innovative cybersecurity strategy for the event, they standardised on a complete, integrated Palo Alto Networks security portfolio for the stadiums’ cybersecurity. This modern cybersecurity strategy ensured millions of fans, players, and staff were able to enjoy the world’s most spectacular soccer competition with pride and confidence.
The world’s largest sporting event
The Supreme Committee for Delivery & Legacy was established by the State of Qatar in 2011 to deliver World Cup Qatar 2022’s infrastructure – including transport, accommodation, and the provisioning and operation of the event’s eight stadiums – and support the event’s legacy into the future. “Legacy” is a key word in the Supreme Committee for Delivery & Legacy constitution – from infrastructure and education to support for regional innovation, the Supreme Committee for Delivery & Legacy is forging a better future for Qatar and the Middle East.
World Cup Qatar 2022 was a breathtaking event. More than 1.5 million fans attended across eight stadiums including the showcase 60,000-seat Al Bayt Stadium, and, thanks to Qatar’s size, fans were able to watch multiple matches in one day. A world-class event of such magnitude required excellence at every stage of its preparation process.
Supreme Committee for Delivery & Legacy’s primary goal was to set a new standard in World Cup infrastructure – at every level.
"As the host of the World Cup Qatar 2022, this was a unique opportunity for Qatar to showcase innovative, integrated security technologies across our stadiums to deliver a safe, smart, and exciting tournament."
–Niyas Abudlrahiman
Executive Director – Tournament ICT, Supreme Committee for Delivery & Legacy
Supreme Committee for Delivery & Legacy’s commitment to that standard of excellence extended to the stateof-the-art cybersecurity infrastructure installed for the tournament stadiums, which spanned everything from internet of things (IoT) and stadium Wi-Fi to industrial control systems and cybersecurity operations. Setting a new cybersecurity standard for a major worldwide tournament was an opportunity that the Supreme Committee for Delivery & Legacy embraced with enthusiasm.
Palo Alto Networks was one of the trusted partners chosen to deliver this ground-breaking stadium cybersecurity strategy. Supreme Committee for Delivery & Legacy’s Manager, Information Security, Kamran Shah, says, “We needed multiple, connected sources of intelligence across a wide landscape. Palo Alto Networks is totally focused on information security. It has made forward-thinking business acquisitions, and its people are continually innovating. Palo Alto Networks has a 360-degree presence across our stadium security requirements and was one of the most important partners for World Cup Qatar 2022 stadiums.”
"We needed multiple, connected sources of intelligence across a wide landscape. Palo Alto Networks has a 360-degree presence across our stadium security requirements and was one of the most important partners for World Cup Qatar 2022."
–Kamran Shah
Manager, Information Security, Supreme Committee for Delivery & Legacy
A new required standard for World Cup stadium cybersecurity
The Supreme Committee for Delivery & Legacy identified that the Qatar World Cup 2022 stadium cybersecurity strategy needed to:
- Offer resilient, high availability, high-performance digital services to fans, players, and staff participants.
- Leverage intelligence to prevent, detect, and respond to cybersecurity events, thereby eliminating risk and inspiring confidence.
- Enable a Zero Trust architecture.
- Deliver modern, state-of-the-art cybersecurity technologies, including threat intelligence, artificial intelligence, and automation.
Modern, connected cybersecurity
A complete, unified Palo Alto Networks portfolio provided World Cup Qatar 2022 stadiums with simple, automated, intelligent cybersecurity. The portfolio spanned network, endpoint, and cloud security – backed by modern threat intelligence, AI, and automation.
Network security
A connected suite of more than 100 ML-Powered Next-Generation Firewalls (NGFWs) protected the event’s physical and virtual networks. Innovative features included the machine learning (ML) used by the NGFWs to protect the network; zero-delay network updates; and accurate identification of IoT devices, such as stadium digital signage and pitch irrigation systems.
Subscription-based Cloud-Delivered Security Services (CDSS), Advanced Threat Prevention, WildFire, GlobalProtect, Advanced URL Filtering, and DNS Security complemented the network security strategy. Together, they delivered best-in-class comprehensive coverage without compromising NGFW performance.
Endpoint security
An integrated Cortex XDR platform protected all endpoints and servers both in and beyond the stadiums, applying ML to network, endpoint, and cloud data. Simultaneously, Strata Logging Service (formerly known as Cortex Data Lake) collected and integrated the security data, continually learning to evolve the event’s defences.
Cortex XSOAR correlated events from more than 30 integrations, orchestrating operational response in the World Cup Qatar 2022 Security Operations Centre (SOC). From a single screen, three Resident Engineers and teams from Unit 42 and Cortex Threat Research were able to monitor every system in all eight stadiums – from the security of the temperature-controlling operational technology (OT) systems to the impressive Wi-Fi services.
Cloud security
An intelligent Cloud Security Posture Management (CSPM) platform – Prisma Cloud – correlated Supreme Committee for Delivery & Legacy’s cloud assets. The team had complete visibility across the environment, enabling them to eliminate blind spots, improve threat detection, and automate response. By providing Supreme Committee for Delivery & Legacy with full visibility into container dependencies, Prisma Cloud also eliminated vulnerabilities in legacy containers.
Management and testing
The Supreme Committee for Delivery & Legacy partnered with Unit 42 to undertake a Palo Alto Networks Compromise Assessment of all assets, including OT workstations, services, and IT systems. Penetration testing, for example, was regularly conducted to test security controls on the infrastructure, including key areas such as IoT security cameras and digital stadium signage. The Unit 42 team also performed Compromise Assessments for all assets, including OT workstations and servers.
Threat intelligence and incident response
An integrated portfolio of cyber risk management and incident response services was used to discover potential compromises, understand their impacts, and provide mitigation recommendations. Data mining, for example, was used to quantify sensitive data that would be at risk in the event of a data breach, including personal health information (PHI), personally identifiable information (PII), payment card industry data (PCI) data.
World-class security for World Cup Qatar 2022
The Supreme Committee for Delivery & Legacy strategy, created in collaboration with Palo Alto Networks, safeguarded data before, during, and after World Cup Qatar 2022. This ensured the whole world was able to watch an exciting and spectacular football tournament while benefitting from world-class cybersecurity protection. It also meant that Supreme Committee for Delivery & Legacy could:
- Deliver efficient security: Security automation and intuitive functionality streamlined everyday security management, strengthened resilience, and released Supreme Committee for Delivery & Legacy resources to focus on strategic tasks. XSOAR, for example, automated security response, orchestrating and integrating data from more than 30 third-party tools.
"Cortex XSOAR was the central nervous system of our stadium cybersecurity monitoring, correlating data from Palo Alto Networks and more than 30 different third-party tools."
–Kamran Shah
Manager, Information Security, Supreme Committee for Delivery & Legacy
- Trusted devices: As Palo Alto Networks solutions – including a Zero Trust architecture – delivered maximum protection, Supreme Committee for Delivery & Legacy could confidently rely on network, hybrid cloud, endpoints, IoT, OT, and all other devices.
- Trusted proven delivery: This Palo Alto Networks portfolio deployment was previously tested by Supreme Committee for Delivery & Legacy during the Arab Cup 2021. According to Kamran Shah, “The stadium security solutions and strategy worked flawlessly at both the Arab Cup 2021 and during the World Cup Qatar 2022, consistently protecting both events.”
- Proactive threat intelligence: Unit 42 provided a continuous flow of real-time threat intelligence in advance of and throughout the tournament, enabling Supreme Committee for Delivery & Legacy security professionals to do their jobs with maximum efficiency to ensure a safe, exciting, and inspirational event.
"Palo Alto Networks has a mature cybersecurity portfolio that’s consistently ahead of the curve. The people are on top of their game and strategically advise us as we innovate for the future. We designed the security strategy to secure the World Cup Qatar 2022 stadiums in collaboration with Palo Alto Networks because we trust them. With these technologies and inspiring people, the world was able to enjoy a safer, smarter World Cup in 2022."
–Niyas Abudlrahiman
Executive Director – Tournament ICT, Supreme Committee for Delivery & Legacy
Share this story
