Business Challenge

During a recent review it was noted that an increasing trend in the frequency and quantity of events relating to attacks on accounts and identities was overwhelming the BCE internal operation teams and was leaving them at a high risk of security compromise. This led to BCE’s decision that they needed to be more proactive in their security posture, and that they were lacking a Security Operations Centre (SOC) to investigate, respond to and action events within the environment.

To best leverage the collection of data and events from within BCE’s existing investment in Microsoft and Azure, along with adjacent security controls and services, they sought out a service that could help them monitor and respond to security alerts on a 24/7 basis across their environment.

Solution

BCE engaged MOQdigital to deliver on this project, citing their broad and deep knowledge and experience in the Cybersecurity sphere. MOQdigital’s capability to provide 24/7 coverage support, a wide breadth of managed service capabilities, and a long-standing partnership with BCE made them the obvious choice for this project.

After a discovery process was completed and upon reviewing BCE’s cybersecurity needs, MOQdigital recommended and deployed Azure Sentinel as part of MOQdigital’s Sentinel Managed Service. The Sentinel solution would be integrated with BCE’s Azure Environment, and include the collection of log sources from outside the Microsoft and Azure environments to provide additional value and insight. With built in AI and ML capabilities and leveraging Microsoft’s significant investment in security, this solution would be managed, developed and enhanced by MOQdigital’s dedicated 24/7 SOC team, and include the following:

• Security Incident Response – Responding to threats based on priority, investigating incidents using Sentinel’s advanced log correlation and visualisation tools, and producing post-incident reports for high profile security incidents.
• Threat Hunting and Investigation – Actively seeking new or unknown suspicious activities, as well as patterns similar to recent events, leveraging Sentinel’s powerful entity explorer and guided hunting notebooks.
• Enhance – Provide a continual cadence on the review and posture of the security capabilities of BCE, ensuring that adequate protections and controls are put in place to stay ahead of the evolving security threat
• Security and Cost Management Report – Regular security incident reports based on the above inclusions, including a forecast on their Azure investment and recommendations.