Data Compliance Case Study

From Risk to Resilience – NLNG’s Compliance-First Approach with Microsoft Purview

Customer Overview & Challenges

Nigeria LNG Limited (NLNG) is a leading liquefied natural gas producer in Nigeria, and one of the world’s leading producers of liquefied natural gas, with operations spanning Europe, Asia, and the Americas.

Established in 1989, NLNG is headquartered in Port Harcourt, Rivers State and operates as one of the world’s largest LNG plants. As a major contributor to the Nigerian economy through revenue generation and job creation, Nigeria LNG Limited (NLNG) generates over $5 billion USD in annual revenue, with a production capacity of approximately 22 million tonnes per annum (MTPA) of liquefied natural gas (LNG) from its six operational trains. Its ongoing Train 7 expansion project is set to boost this capacity by an additional 7.6 MTPA, bringing the total to around 30 MTPA.

Amid its significant digital transformation and the rollout of its $7.6 billion Train 7 expansion project, NLNG faced a growing data security challenge. With critical data assets ranging from financial records to engineering blueprints, the company needed a secure, scalable framework to protect information across its hybrid IT environments.

NLNG grappled with escalating risks such as data loss, insider threats, non-compliance with regulations like GDPR and Nigeria’s NDPR, and a fragmented data governance structure. With over 8,000 employees and extended supply chain partners, the company sought a unified solution to safeguard its information, ensure regulatory compliance, and reduce operational complexity.

Solution

To address these challenges, NLNG partnered with Wragby to deploy a robust, future-proof data security and compliance framework powered by Microsoft Purview. The engagement began with a data discovery exercise that revealed critical gaps in access governance, data classification, and platform visibility.

Wragby developed a phased, 12-month roadmap that aligned with NLNG’s Train 7 timeline:

  • Q1: Proof of concept with Purview Information Protection for contract classification
  • Q2: DLP policy rollout to 8,000+ Office 365 users
  • Q3: Insider Risk Management integration via Azure AD
  • Q4: Continuous compliance monitoring through Microsoft Compliance Manager

The solution included:

  • Information Protection: Automated discovery and classification of sensitive data
  • Data Loss Prevention (DLP): Policy enforcement across SharePoint and Teams
  • Insider Risk Management: User behavior analysis linked with endpoint telemetry
  • Microsoft Sentinel: Centralized monitoring and incident response

Customer Benefits

The implementation of Microsoft Purview by Wragby team brought about immediate and measurable benefits:

  • 98% of LNG contracts auto labeled and encrypted for secure EU data transfer
  • 75% reduction in accidental data leaks due to DLP enforcement
  • 60% decrease in false positives from insider threat monitoring using Sentinel XDR correlation
  • 92% Secure Score achieved (up from 44%) in under 12 months
  • 60% fewer third-party tools, streamlining operations and cutting costs
  • 1,800+ hours saved annually on audit preparation due to automated compliance features

Additionally, Microsoft Purview enabled NLNG to remain compliant with global and local regulations while safeguarding operational uptime. For example, a contractor’s attempt to export drilling schematics via Teams was immediately blocked by embedded DLP, a feat the legacy vendor could not match in time.

Scaling Impact with Wragby

Wragby’s deep sector expertise allowed NLNG to go beyond deployment. By embedding itself into operations and aligning DLP policies with OT workflows, Wragby created a tailored solution that was both technically sound and business aligned.

NLNG’s insider threat program, powered by Azure AI, identified behavioral anomalies such as a resigning engineer attempting to export SCADA configurations—a critical risk missed by legacy tools. Microsoft’s compliance framework, pre-certified for over 120 regulations, further eliminated the need for costly third-party point solutions.

Through this partnership with Wragby, NLNG transitioned from a fragmented data security model to an integrated Microsoft-powered ecosystem. Microsoft Purview’s seamless integration, AI-driven insights, and regulatory coverage transformed NLNG’s compliance and data protection posture. This strategic transformation not only ensured business continuity for the Train 7 project but also positioned NLNG as a benchmark for secure digital operations in Africa’s energy sector.

Client:
BUA Cement
Category:
Date:

October 10, 2024