MTS RED SOC connected to protect Segezha Group from cyber attacks

2023: Use of MTS RED SOC

Russian The timber industry holding Segezha Group has strengthened protection against digital threats using the services of the monitoring and response center provided cyber attacks MTS RED SOC by MTS RED the subsidiary MTS in the field. MTS cyber security RED announced this on September 28, 2023.

Segezha Group has 23 offices and facilities on site for September 2023. Russia More than 20,000 people work there. Before the start of the project, the holding independently monitored events information security in on the To IT infrastructure basis of the internal SIEM system. With the growth of the team and the number of protected systems, they decided to transfer this function to. outsourcing

{{quote "Identifying and analyzing events in a growing infrastructure requires investment not only in additional cybersecurity systems, but also in personnel. Our financial models have shown that the transfer of these tasks to an outsourcing center is economically more justified than hiring employees. In addition, this allows you to quickly solve the problem of a shortage of qualified specialists in the cybersecurity market, "explained Maxim Korolev, director of information security at Segezha Group. }}

As of September 2023, MTS RED controls more than 4,000 critical workstations of employees and servers, including in geographically distributed branches of the holding.

We have connected Segezha Group's information assets to the monitoring service for the month. The Customer shall immediately receive notification of all critical incidents in the infrastructure under the control of MTS RED SOC. Our specialists work around the clock, so the Segezha Group can quickly respond to all cybersecurity incidents and repel possible attacks from hacker groups, "said Andrey Dugin, director of the MTS RED cybersecurity services center.

As part of the project, MTS RED SOC specialists also integrated the monitoring service with the incident response automation system, which is already used by the Segezha Group. Now messages about malicious or abnormal processes and events in the infrastructure are analyzed faster and better. This allows you to more effectively prevent attackers from attacking.