Setting up a managed SOC with Microsoft Sentinel

Customer requirements

A company was looking for a scalable solution for the continuous monitoring and evaluation of IT security events. The aim was to set up a Security Operations Center (SOC) with a suitable SIEM tool - operated in German and from Germany.

Challenge

The decision-making processes were complex and involved several internal and external organizational units. At the same time, the existing IT team had to be involved in order to retain knowledge and take existing expertise with them.

Translated with DeepL.com (free version)

Project highlights

24/7 Security Operations Center in German language
Scalable SIEM architecture with Microsoft Sentinel
Compliance with regulatory requirements (e.g. NIS2, ISO 27001)
Knowledge transfer & development of internal security expertise

SPIRIT/21 solution

Together with the customer, SPIRIT/21 carried out a structured selection of suitable SIEM tools. The choice fell on Microsoft Sentinel. The solution was then implemented and a 7x24 SOC was set up. At the same time, SPIRIT/21 promoted the assessment skills of the customer teams and provided support in setting up an internal security organization.