Increased resilience to cyber threats
The security and reliability of the services we provide are crucial, especially for business customers who entrust us with their IT resources.
Due to the growing scale of our operations and increasingly stringent market requirements and new regulations (including NIS 2), we have decided to implement a Security Operations Center (SOC) and a Security Information and Event Management platform, i.e. SIEM as a service. The project aimed to enhance cybersecurity, shorten incident response times, and bolster trust in our services.
The need for greater resilience and real-time visibility
As the leader of the data center market in Poland, we provide colocation, dedicated servers, and cloud computing services to customers in various industries. This means that huge amounts of data are processed in our infrastructure every day. With the construction of new data centers and the development of services, it has become crucial for us to ensure the following:
- Continuous observability and rapid response to incidents (24/7)
- Automation of activities in response to threats
- Full compliance with industry and legal requirements
- Integration of security with customer business processes
High SLAs, dynamic environments, and sensitive data require a scalable, flexible, and tailored solution.
Solution: SOC and SIEM/UEBA/SOAR services in a SaaS model
In cooperation with Trecom, we implemented a Security Operations Center based on the SecureVisio platform operating in a service model. The solution includes the following:
- Real-time risk analysis using CMDB, BIA, and MITRE ATT&CK
- Full support for the SIEM/UEBA/SOAR platform in a SaaS model
- Automatic response playbooks (SOAR)
- Vulnerability management and prioritization based on business impact
- Security reporting and documentation in accordance with ISO and audit requirements.
Explanation of acronyms used:
CMDB: Configuration Management Database
BIA: Business Impact Analysis
MITRE ATT&CK: MITRE Adversarial Tactics, Techniques, and Common Knowledge
SIEM: Security Information and Event Management
UEBA: User and Entity Behavior Analytics
SOAR: Security Orchestration, Automation, and Response
Results: greater security = greater service reliability
The implementation has brought tangible benefits to our team and customers.
- Reduced incident detection and neutralization times
- Increased resilience of production environments to external and internal attacks
- Better control over infrastructure and risk.
- Additional increase in compliance with standards (NIS 2, ISO 27001).
- Improved operational communication and process automation.
The implemented solution directly translates into higher reliability of the services Atman provides, ensuring security that customers can rely on.
Security equals reliability
At Atman, security is an integral part of the quality of our services, including colocation, server infrastructure, cloud infrastructure, and data transmission.
Thanks to the implementation of SOC and SIEM as a Service, we have gained a new level of protection and a tool that fosters transparency and trust in our relationships with customers.