Following a significant merger between two major telecommunications entities, the newly established telecom giant sought to streamline and modernise its security operations. The objective was to enhance asset visibility across critical business functions, minimise the proliferation of security tools, and consolidate systems.
Moreover, the organisation aimed to improve monitoring capabilities while addressing considerable technical debt incurred both before and after the merger. This transformation was intended to optimise operations and ensure ongoing regulatory compliance.
Recognising the scale and complexity of the project, the telecom company enlisted the expertise of RiverSafe, known for their proficiency in SOC and SIEM transformation projects.
Collaborative approach to security systems integration
The initiative began with a series of collaborative workshops designed to align on the company’s future security objectives. During this initial phase, RiverSafe identified 12 legacy SIEMs within the organisation.
A central task was to aggregate a major cloud-based security platform, merging three separate instances into a unified system. This consolidation involved integrating state-of-the-art single sign-on capabilities, new data sources, and the seamless transfer of existing data parsers, dashboards, and lookups.
Data management and routing enhancement
RiverSafe enhanced data management and routing by deploying Cribl, an advanced data streaming platform
RiverSafe enhanced data management and routing by deploying Cribl, an advanced data streaming platform. This solution enabled efficient data feed routing to multiple destinations and allowed for complex data transformations, granting the telecom firm enhanced flexibility and control over its data.
The RiverSafe team also identified opportunities for optimising the existing SIEM infrastructure. With a strategic consolidation plan, they transitioned operations onto two robust platforms: a cloud-based security operations platform for broad use and an on-premises SIEM solution tailored to meet specific regulatory compliance mandates.
Benefits and future prospects
The transformation delivered substantial improvements, with optimised SIEM platforms enhancing the telecom company's operational efficiency and security visibility. The updated infrastructure advanced avenues for automation and data enrichment, significantly boosting security measures.
Implementing the data streaming solution also improved data routing efficiency, resulting in considerable cost savings in licensing fees. Beyond these immediate benefits, the transformation set a foundation for future advancements through increased automation potential, bolstering compliance with industry regulations and strengthening the company’s overall security posture and monitoring capabilities.
In the wake of a significant merger between two major telecommunications companies, the client, a newly formed telecom giant was looking to unify and modernise security operations across the entire organisation.
The merged entity needed to increase asset visibility for its critical business operations, reduce the sprawl of security tooling, and unify its systems. Additionally, the company was looking to improve its overall monitoring capabilities while addressing a substantial amount of technical debt that had accumulated both pre- and post-merger. This transformation would not only optimise operations but also ensure continued compliance with industry regulations.
Recognising the complexity of this project, the client decided to bring on RiverSafe due to the specialised expertise and experience with SOC and SIEM transformation projects.
The solution
The programme of work began with a series of collaborative workshops, fostering a deep understanding of the company’s vision for its future security landscape. During this discovery stage, the RiverSafe team uncovered 12 legacy SIEMs existing within the organisation.
They began by consolidating a major cloud-based security platform, evolving it from three separate instances to a single, unified platform. This consolidation included integrating cutting-edge single sign-on capabilities, incorporating new data sources, and seamlessly migrating existing data parsers, dashboards, and lookups.
Data management and routing
To enhance data management and routing, RiverSafe implemented Cribl, a sophisticated data streaming platform. This allowed for efficient routing of data feeds to multiple destinations and enabled complex data transformation operations, providing the telecom company with greater flexibility and control over its data.
The RiverSafe team further identified an opportunity to optimise the existing SIEM infrastructure and devised a strategic plan to consolidate operations onto two robust platforms: a cloud-based security operations platform for general use, and an on-premises SIEM solution to meet specific regulatory compliance requirements.
The outcome
The impact of this transformation was substantial. By optimising its SIEM platforms, the telecom company significantly improved its operational efficiency and security visibility. The streamlined infrastructure opened up new avenues for automation and data enrichment, further enhancing the company’s security capabilities.
The implementation of the data streaming solution not only improved data routing efficiency but also led to substantial cost savings in licensing fees.
Beyond these immediate benefits, the transformation laid the groundwork for future innovations through increased automation potential. It also further strengthened the company’s compliance with industry regulations and enhanced its overall security posture and monitoring capabilities.
