Going 'All In' for Protection and Compliance with the Critical Security Controls at Sun Country Airlines
About Sun Country Airlines
Sun Country Airlines is a small, regional air carrier based in Minnesota with a fleet of 18 aircraft. In 1982, a group of pilots and flight attendants from the defunct Braniff International banded together to form their own airline with the help of businessmen in the Twin Cities of Minneapolis/St. Paul, MN. Since 2011, Sun Country has been owned by Cambria. Sun Country has been recognized for the top notch service provided to passengers by being ranked in the Top Ten Domestic Airlines lists by both Travel+Leisure for five years in a row and Conde Nast Travelers three years in a row.
About the User
James Nolin received his BS/CIS from Jacksonville State University and his MBA from the Manderson School of Business at the University of Alabama. Currently he is VP of IT Operations at Incomm. Previously he served as the Senior Director of IT at Sun Country. Nolin has more than 20 years establishing high-performance IT infrastructure and IT Operations with stops at Bellsouth Telecommunications, GE Capital ITS and AirTran Airways.
SANS Summary
A security professional recently hired by a small airline found a \very immature IT operation" with "no secure PCI infrastructure, planning, programming or management," without even complete deployment of point solutions. He faced business disruption if the environment could not pass a PCI assessment or a DoD audit. With a limited staff and only 6 months of "runway," he began investigating options for a single solution provider that could essentially drop in a system-wide set of controls that worked like a single "rack" of equipment. He couldn't find one to meet his needs, but McAfee worked with him to deploy an integrated, system-wide capability that did not require any staffing increase. After a four week Proof of Concept, the Sun Country CEO signed off on a full deployment of the McAfee solution.
