Case Study: Rabobank achieves stronger threat detection and security resilience with OpenText ArcSight ESM

Rabobank - Customer Case Study

Rabobank, a large Dutch cooperative bank with international operations, faced a rising tide of advanced persistent threats (APTs) and needed more sophisticated SIEM use cases to improve event correlation and reduce undetected intrusions. Its legacy RSA enVision solution lacked the needed capabilities and pace of development to provide contextual, accurate alerts for timely response.

Rabobank deployed Micro Focus ArcSight ESM (three instances for high availability) to ingest about one million security logs per day from thousands of servers and integrate with other IT/security tools. The bank built 30–40 advanced use cases, which improved detection accuracy and reduced false positives, enabled fast identification of rogue devices, streamlined compliance reporting, and strengthened the productivity and effectiveness of its security team.

Rabobank

Mark Beerends

Head of Security Operations Center