Organizations managing sensitive data need visibility across attack surfaces to stay ahead of aggressive threats. This customer story shows how Oregon State University uses Microsoft Sentinel and Microsoft Defender to consolidate logs, detect unusual activity quickly, and reduce daily open incidents from thousands to roughly 30. Read this story to see what this transformation looks like and contact AMA IT Consulting to discuss strengthening visibility and protection in your environment.
What cybersecurity incident did OSU face in 2021?
OSU faced an extensive cybersecurity incident that revealed gaps in their security operations. The incident involved criminal efforts and required a considerable amount of manual work to manage. This experience highlighted the need for enhanced security measures and led to the establishment of their Security Operations Center (SOC) to improve their security posture.
How has OSU improved its cybersecurity measures?
OSU opted for Microsoft solutions, integrating Microsoft 365 A5 licensing and adopting a Zero Trust approach. They deployed Microsoft Sentinel and Microsoft Defender, which significantly improved their security capabilities. For instance, they reduced their daily open incident count from thousands to approximately 30, and they can now detect incidents in minutes instead of weeks.
What role does Microsoft Copilot for Security play at OSU?
Microsoft Copilot for Security is being used to enhance OSU's cybersecurity measures by increasing automation and improving operational efficiency. It allows security analysts, including students, to focus on high-priority tasks and refine detection processes. This initiative aims to lower operational costs and drive the incident ticket count down to zero, while also serving as a valuable learning tool for students involved in the SOC.
Sign in with LinkedIn