Case Study: du achieves 85% fewer security alarms and rapid incident response with Hewlett Packard Enterprise ArcSight ESM

du Secures Network Resources, Optimizes Organizational Efficiency And Enables Growth

du, the UAE telecom operator serving more than 6.5 million mobile customers and a broad base of fixed and business subscribers, needed to automate security and compliance monitoring to protect rapidly growing network and IT infrastructure, improve operating efficiency, and scale services. To address these challenges the company selected Hewlett Packard Enterprise’s ArcSight Enterprise Security Manager (ESM) as the core of its Security Operations Center (SOC).

Hewlett Packard Enterprise implemented ArcSight ESM to collect, correlate and report security data in real time, enabling du to build a mature SOC/SIRT, develop 550+ custom use cases and 62 custom connectors, and analyze more than 30,000 events per second. As a result, du reduced security alarm rates by 85% (alerts requiring analysis fell from ~7,000 to <1,000/month), cut average alert handling time from 24 hours to under 90 minutes, improved true-positive detection by 400%, and now detects 82% of compromise attempts within 24 hours.

du

Marwan Bindalmook

Senior Vice President of Technology Security and Risk Management