Securing the Paris 2024 Olympic and Paralympic Games

Faster, higher, secure!

In the run up to Paris 2024  games, athletes spent countless hours practicing, performing and improving their scores to qualify for the Games. Their aim was simple: to be faster, better and stronger than their competitors.

As the Paris 2024 Games unfolded before viewers across the world, the athletes went on to deliver performances like no other, unmatched and unmissable, as did their cybersecurity counterparts working tirelessly behind the scenes for a nonstop, secure event.

Cybersecurity at the Paris 2024 Games was the result of over four years of meticulous preparation. Starting in 2020 with a single dedicated cybersecurity specialist among 130 Paris 2024 employees, the team and its effort have grown significantly. By 2024, more than 100 Eviden cybersecurity experts were mobilized to ensure the safety and security of the Olympic and Paralympic Games.

This operation included one dedicated Cybersecurity Operations Center (CSOC) located in Paris and two European Operations Centers providing additional support to the CSOC 24/7.

One step ahead… always!

Preparation is critical and the lack of it can prove fatal, especially when it comes to a highly visible event like the Paris 2024 Games. The stakes were even higher with the advancement of new technologies like AI. That’s why close collaboration and a strong partnership with the organizing committee was key to ensure Eviden services and solutions met any upcoming challenge.

As a part of the Atos Group, Eviden has a long-standing partnership with the Olympic and Paralympic Games since 1992. Leveraging their deep understanding of the requirements, was instrumental in delivering a secure and seamless delivery of the Olympic and Paralympic Games. The cybersecurity leader also onboarded veterans of previous Olympic and Paralympic Games to share their insights and expertise to deliver perfect Paris 2024 operations.

Uncompromised security

Eviden’s teams delivered services around three core capabilities:

cybersecurity planning and preparation, products and services, and operations.

1) Cybersecurity planning and preparation

Eviden’s cybersecurity strategy centered on rigorous planning, training, and testing. Comprehensive programs included audits, penetration testing and red teaming. For example, Eviden’s Cyber Threat Hunting (CTH) team developed advanced hunting queries and preventative measures to mitigate risks such as the exploitation of Entra ID, a critical identity and access management service.

A Bug Bounty program engaged 450+ ethical hackers to test 20 critical applications, including public-facing systems like ticketing and volunteer portals, as well as specialized platforms for athletes, media, and officials.

Two intensive technology rehearsals were conducted to prepare the teams for high-risk scenarios. This included simulating, for instance, ransomware attacks followed by other types of cyberattacks, designed to test how the teams would handle simultaneous threats and manage threat response under pressure.

2) Cybersecurity products and services

Eviden’s robust protection systems against attacks such as information leaks, data breaches, sabotage, reputational damage, and fraud were instrumental in this project.

An integrated approach included vulnerability management, real-time automated threat detection and response for 360° protection, with advanced services like AIsaac, Eviden’s next generation cybersecurity detection and response platform.

Eviden also countered rising threats like EDR Killers like EDRSandblast, which bypasses endpoint security solutions through stress tests and refined EDR configurations. This involved enhancing detection capabilities and developing tailored monitoring queries to proactively identify any attempts to exploit vulnerable drivers. Additionally, Eviden’s Digital Risk Protection Surveillance (DRPS) actively identified and neutralized risks, such as exposed credentials and sensitive documents in public domains, using advanced techniques like Google dorks.

3) Cybersecurity operations

As a cybersecurity leader, Eviden demonstrated its expertise with proactive cybersecurity incident management and by establishing emergency response teams to cybersecurity incidents and deploying a comprehensive approach that included the following:

• Proactive incident management: Eviden established the CSOC and Digital Forensics and Incident Response (DFIR) teams to handle any potential cybersecurity incidents.
• 24/7 monitoring and response: The teams ensured continuous monitoring and rapid response to threats through optimal management of cybersecurity products and solutions.
• Dynamic risk assessment: Rigorous and continuous risk assessments helped adapt to the evolving threat landscape.
• Threat intelligence platform: Deploying a dedicated threat intelligence platform (TIP) to protect Paris 2024 data, brand, partners, and suppliers facilitated real-time information sharing. This included more than 6 million indicators of compromise, and collaboration with 25 partner organizations, enabling proactive threat management.
• Real-world threat mitigation: Eviden’s proactive approach to cybersecurity was critical in identifying and mitigating a wide range of threats, including:
  • Typosquatted domains: Over 1,500 typosquatted domains were identified and continuously monitored.
  • Misinformation and disinformation: False narratives and rumors, such as a fake AI video titled Olympics has fallen were countered.
  • Threat alerts: Potential threats like planned protests were identified and responded to.
  • Brand protection: Fake domains and phishing attempts exploiting the Olympic brand were taken down.
  • Threat actor activity: Activities of various threat actors, including hacktivist groups, were actively monitored and mitigated.

Relentlessly vigilant