Case Study: Major Healthcare Provider achieves stronger security control and faster threat detection with OpenText ArcSight

ArcSight supports efficient patient care through transparent risk monitoring with relevant statistics, improving resolution times

A Major Healthcare Provider needed a stronger way to manage security across a complex, multilocation environment, with millions of daily events, strict compliance demands, and growing risks from privileged accounts and emerging threats. After evaluating options including IBM QRadar and Nitro, the organization chose OpenText ArcSight Enterprise Security Manager (ESM) and ArcSight Logger to gain the security control, real-time correlation, and centralized log management it needed.

OpenText implemented ArcSight to collect and correlate data across systems, quickly identify false positives versus true positives, and support rapid after-action analysis. The results were significant: auditors were satisfied, security logs could be collected in minutes instead of hours, and analysts could determine incidents in 10–15 minutes. The provider also reported improved visibility into privileged-user activity, faster detection of intrusions such as EternalBlue attempts, and stronger readiness for IoT security challenges, all while keeping security incidents to a minimum.