Centralized Log Management Solution to Help Monitor Events in Banking Industries

The Japanese Bank in Indonesia is a foreign exchange bank that was established in 1989 and is headquartered in Jakarta. This bank has the ultimate shareholder, which is domiciled in Japan. Responsive and careful banking solutions, supporting the growth of the Indonesian economy and society and providing high-quality services are the solutions provided by The Japanese Bank.

The Japanese Bank entrusts PT Mitra Integrasi Informatika to implement the Splunk Solution, namely Splunk Enterprise and also Splunk IT Service Intelligence at The Japanese Bank. This solution can be called the Centralized Log Management Solution. This solution aims to build information security and event management with a GPS-based time server solution as an effort to respond to the importance of centralized log management solutions and also time servers.

Project Objectives

1. To implement Security Information and Event Management with GPS based Time Server Solution
2. To Integrate log data and clock synchronization from various managed IT assets.
3. To develop Security Information and Event Management for alert setup, Cyber ​​Incident rule definition, and report customization
4. To have maintenance and support services for the proposed solution

Technology Solution

SIEM Implementation:

1. Investigate : Splunk solution is used to investigate and correlate events across the stack.
2. Monitor: To align the same data Platform across infrastructure, applications, and services to proactively monitor and report across teams.
3. Analyze: To connect and apply AI and machine learning to predict issues and reduce noise.
4. Act: To orchestrate and automate tasks to resolve known issues.

Splunk ITSI:

Monitoring business service, tech service, & App Service

Splunk SOAR:

1. To automate security security
2. Run automation with faster time
3. Helping the SOC team to be proactive and focus on important goals to protect The Japanese Bank's business

Business Impact:

Works More Easy with Splunk Dashboard

The security domain dashboard provided with Splunk Enterprise Security allows The Japanese Bank to monitor events and the status of important security domains. The Japanese Bank can review summarized data on the main dashboard, and use the search dashboard for specific domains to investigate raw events.

Splunk Enterprise Security includes over 100 dashboards that provide an integrated view and communicate important data that The Japanese Bank can customize and share with targeted end users. Use the Splunk Enterprise Security dashboard to identify and analyze findings and investigations, uncover insights into events at The Japanese Bank, accelerate investigations, monitor the status of various security domains, and audit investigations and implementation of Splunk Enterprise Security at The Japanese Bank.

Real Time & Up to Date Monitoring Report

Splunk Enterprise Security (ES) is a SIEM (Security Information and Event Management) platform that provides real-time monitoring of security events and incidents. This enables the security team at The Japanese Bank to respond quickly to threats.

Splunk ES provides continuous monitoring to detect and respond to threats and incidents in real time. The Japanese Bank can seamlessly drill down into data across distributed environments for faster investigation and remediation.

With Splunk, the Japanese Bank team can correlate data and get alerts to gain insight into the security posture and understand the context of incidents at Japanese Bank.