Scalable Cybersecurity Implementation in Los Angeles

This case study outlines the cybersecurity approach adopted by the Information Technology Agency (ITA) of Los Angeles, specifically through the Integrated Security Operation Center (ITA-ISOC) using Wazuh Cloud. The ITA manages a diverse range of IT services for various departments across the city, facing challenges in cybersecurity management due to the scale of operations. Wazuh Cloud was implemented to enhance log collection and management, particularly for Windows events, which improved collaboration between departments when unusual activities were detected. The ITA-ISOC developed custom rules for specific event channels and integrated existing security tools to enhance protection. The objectives include consolidating logs and telemetry data across departments and ensuring minimum cybersecurity standards for smaller departments. Achievements noted include rapid identification and response to security threats, scalability in log collection, and the ability to deploy custom rules swiftly across multiple departments.