IBM QRadar information security SIEM platform
Raising the bank's information security level through centralized event monitoring, incident correlation and automation of threat response.
Objective
The bank had no centralized information security monitoring system. Scattered logs were processed manually, which made prompt detection of incidents impossible.
Solution
IBM QRadar SIEM was deployed - a platform for centralized collection, correlation and analysis of security events. Correlation rules and automatic alerts were configured, and sources from network equipment, servers and online banking systems were connected.
Result
A fully functional SOC with centralized monitoring. The mean time to detect incidents (MTTD) was reduced from several days to minutes. Automated correlation eliminates manual analysis of thousands of events per day.