Vossloh AG Security Operations Center Implementation

This case study outlines the implementation of a Security Operations Center (SOC) at Vossloh AG, a global railway technology group. The document details the challenges faced by Vossloh AG, including the need for a fully functional SOC, consolidation of IT security infrastructure, and 24/7 monitoring. The solution involved migrating IT to the Microsoft tech stack and implementing Microsoft Defender as an endpoint detection and response (EDR) solution, alongside Microsoft Sentinel as a Security Information and Event Management (SIEM) platform. The case study highlights the collaboration with Ontinue, which provided the necessary expertise to operationalize the SOC and centralize IT security. The document also discusses the business outcomes of this initiative, emphasizing the significant reduction in alerts reaching the security team and the improved visibility across the IT landscape. The case study serves as a comprehensive account of Vossloh AG's strategic approach to enhancing its cybersecurity posture through modern technologies and centralized operations.