Building a stronger defence against cyber threats

HD Korea Shipbuilding & Offshore Engineering strengthens cybersecurity with IBM Autonomous Security

A sleek laptop is depicted in a digital security-themed setting, surrounded by icons representing encryption, data storage, and secure access. The visuals include a lock, a data chip, and a bar graph, all connected by glowing lines. The dark background emphasizes the modern and technological mood.
When cyber threats put sensitive data at risk

HD Korea Shipbuilding & Offshore Engineering operates in a manufacturing environment where intellectual property and core technologies are critical assets. As a global shipbuilding leader, HD KSOE and its subsidiaries manage highly sensitive technologies, including advanced naval defence technologies and government-designated National Core Technologies (NCTs). As cyber threats against Korean manufacturing companies continued to rise, the company recognized the need for stronger security monitoring capabilities. How could it strengthen its defences while keeping pace with an increasingly complex threat landscape?

The company needed greater visibility across its security environment, faster detection and response, and a more comprehensive approach to vulnerability management aligned with diverse security standards. High volumes of security alerts also made it increasingly important to distinguish meaningful threats from noise. HD Korea Shipbuilding & Offshore Engineering needed a scalable security operation that could provide continuous monitoring and help protect its critical technologies.

65% fewer SIEM and EDR alerts 4,600+ Web and infrastructure assets scanned 28% expected productivity gain
Through our partnership with IBM and its advanced AI capabilities, we have transformed our 24/7 security operations, strengthening our ability to detect, analyse and respond to threats with greater speed and precision. This partnership is helping us build lasting cyber resilience and better protect our critical technologies against an evolving threat landscape.
Hogeun An CISO HD Korea Shipbuilding & Offshore Engineering
Building a stronger security operation around the clock

HD Korea Shipbuilding & Offshore Engineering turned to IBM® Security Services to strengthen its security monitoring capabilities and establish a more robust operating model. IBM designed and delivered a 24x7 Security Operations Center (SOC) service using its global IBM Threat Detection and Response (TDR) capabilities.

The solution combines AI/ML-enhanced SOC services powered by IBM Autonomous Security, an integrated AI-native operating model, delivering measurable reductions in risk exposure, attack surface, and response time. HD Korea Shipbuilding & Offshore Engineering used IBM Autonomous Threat Operations Machine (ATOM), the agentic AI system within Autonomous Security that runs security operations. In conjunction with Advanced Threat Disposition Scoring (ATDS), this allowed for endpoint detection and response (EDR) data to be ingested into the security information and event management (SIEM) environment. Customized rules help reduce unnecessary alerts while AI-powered capabilities support more efficient security operations.

IBM also established a follow-the-sun delivery model, leveraging managed service centers in India, Poland and Costa Rica to support continuous operations. Alongside the SOC, IBM incorporated IBM Exposure Management Services, including penetration testing for web applications and CCE-based security configuration assessments of applications and infrastructure. These ongoing assessments help identify security weaknesses, address emerging threats and maintain a strong security posture.

Creating a smarter, more efficient security operation

With IBM’s 24x7 SOC services in place, HD Korea Shipbuilding & Offshore Engineering has strengthened its ability to monitor and respond to threats around the clock. Customized rules reduced the number of alerts generated across SIEM and EDR environments by 65%, helping reduce noise and enable greater focus on relevant security events.

The exposure management program extends visibility across the environment, with more than 4,600 web and infrastructure assets identified for scanning. This provides a foundation for ongoing vulnerability assessments and remediation as new threats emerge. The solution is also expected to deliver a 28% productivity improvement, supporting a more efficient security operating model.

The engagement also extends beyond HD Korea Shipbuilding & Offshore Engineering, with IBM Security Services positioned to deliver 24x7 SOC services for other HD Hyundai affiliates. With IBM as a continuing cybersecurity partner, the organization has established a stronger foundation for protecting critical technologies and adapting its defences as the threat landscape evolves.

About HD Korea Shipbuilding & Offshore Engineering

HD Korea Shipbuilding & Offshore Engineering (HDKSOE), part of HD Hyundai, is the intermediary holding company for HD Hyundai’s shipbuilding and offshore engineering business. Founded in 1972 and headquartered in Seongnam, South Korea, it provides shipbuilding, offshore engineering, marine engines, energy, decarbonization and eco-propulsion solutions to customers worldwide.

Solution components IBM® Cyber Threat Management Services IBM ATOM IBM Exposure Management Services IBM Autonomous Security IBM Security Services IBM Threat Detection and Response (TDR)
Transform your cybersecurity with IBM Consulting

Explore how IBM Autonomous Security can help strengthen your security posture, accelerate threat detection and response, and build a more resilient organization.

  1. Learn More
  2. Read the Threat Intelligence Report
Legal

© Copyright IBM Corporation, October, 2026.

IBM, the IBM logo, and IBM Consulting are trademarks or registered trademarks of IBM Corp., in the U.S. and/or other countries. This document is current as of the initial date of publication and may be changed by IBM at any time. Not all offerings are available in every country in which IBM operates.

Client examples are presented as illustrations of how those clients have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary.