Log360 helps Citizens Bank & Trust Co. of Grainger County Automate Log Management and Threat Detection
About the Organization
Citizens Bank & Trust Co. of Grainger County is a state-chartered bank with a rich legacy. The bank recently celebrated 100 years of successful operations in December of 2019. Citizens has offices in five locations across the county, fulfilling the banking needs of over 13,000 customers.
It offers various services to its customers ranging from checking accounts, loan products, notary services, safe deposit boxes, and more. The organization has a compact two-member IT team with Daniel Fast, information security and technology officer, overseeing its IT security operations.
-
Company
Citizens Bank & Trust Co -
Location
USA -
Industry
Finance
Challenges
Being a financial services organization, managing events from all devices connected to the network is one of the primary requirements for Federal Financial Institutions Examination Council (FFIEC) compliance. The logs had to be manually reviewed on an ad hoc basis to spot issues.
Since this process was repetitive and time-consuming, often times, only logs from servers that were deemed critical were audited. Going through logs from all the connected workstations and devices manually wasn't practically possible with such a small IT team. They had to constantly look through hundreds of emails from numerous threat feeds to identify potential risks.
The Solution
Fast was looking for a security information and event management (SIEM) solution to automate the process of log monitoring and threat detection. The out-of-the-box features, unbeatable price, and positive reviews on Gartner and other reputed forums led him to ManageEngine Log360. With Log360, Fast was able to improve the cybersecurity posture of the Citizens Bank & Trust Co. by:
- Automatically monitoring logs from all the components connected to the network rather than a few critical servers.
- Monitoring sensitive servers to detect any anomalous activities.
- Generating several built-in reports by collecting, parsing, and analyzing logs or creating custom reports based on the requirement.
- Leveraging Log360's threat intelligence capabilities. The threat intelligence module spontaneously correlates information from various threat feeds and assists the IT team in protecting the network from the latest known threats.
- Monitoring Active Directory and network devices to enable treat intelligence, which helps the organization fulfill banking compliance requirements.
- Utilizing Log360's flexible, custom functionalities for all the bank's specific SIEM needs.
Impact
Citizens Bank is glad to have chosen Log360 as its SIEM solution especially due to the return on investment. It also appreciates the manner in which feature requests are handled and the support extended in customizing the product to suit the bank's requirements. Fast remarked,
"The automation of log management across AD and the entire network saves me a ton of time and gives me the confidence that my network is secure. I know that no threats are present on my network."
About Log360
ManageEngine Log360, an integrated solution that combines ADAudit Plus and EventLog Analyzer into a single console, is the one-stop solution for all log management and network security challenges. This solution offers real-time log collection, analysis, monitoring, correlation, and archiving capabilities that help protect confidential data, thwart internal security threats, and combat external attacks. Log360 comes with over 1,200 predefined reports and alert criteria to help enterprises meet their most pressing security, auditing, and compliance demands. For more information about Log360, visit manageengine.com/log-management.
Log360 is a unified SIEM solution with integrated DLP and CASB capabilities that detects, prioritizes, investigates, and responds to security threats. It combines threat intelligence, machine learning-based anomaly detection, and rule-based attack detection techniques to detect sophisticated attacks, and offers an incident management console for effectively remediating detected threats. Log360 provides holistic security visibility across on-premises, cloud, and hybrid networks with its intuitive and advanced security analytics and monitoring capabilities.
Product Documents
Others
2022 Zoho Corporation Pvt. Ltd. All rights reserved.