Managed SOC for a Core Banking ISV
Cherrylabs partnered with ITCS, a cloud-based Core Banking application vendor, to deliver Managed SOC services for over 100 small financial institutions—ensuring 24/7 monitoring, faster incident response, and cost-efficient security with Azure Sentinel.
ITCS (Cloud-based Core Banking ISV) | Financial Services / ISV
01
Background
ITCS, a leading Independent Software Vendor (ISV) providing cloud-based Core Banking solutions, serves more than 100 small financial institutions.
With growing cyber threats such as phishing and malware, and limited IT resources across their client base, ITCS needed a robust Managed SOC solution to protect its customers while ensuring compliance and operational resilience.
02
Challenges
- Increasing phishing, malware, and targeted attacks on financial services.
- Limited expertise within ITCS and its client banks for effective SOC management.
- Need for continuous 24/7 monitoring across diverse IT environments.
- Pressure to improve security posture without high operational costs.
03
Objectives
- Faster Threat Detection & Response: Minimize time to detect and respond to incidents.
- 24/7 Monitoring: Ensure uninterrupted visibility across client institutions.
- Cost Efficiency: Deliver enterprise-grade SOC capabilities through cloud-native tools.
04
Our Approach
Centralized Managed SOC with Azure Sentinel
- Deployment: Integrated Azure Sentinel with client firewalls, VMs, and existing security tools.
- 24/7 Monitoring: Provided round-the-clock monitoring of IT infrastructure across 100+ institutions.
- Incident Response Framework: Established a clear response plan, including escalation paths, communication procedures, and remediation.
- Continuous Reporting & Reviews: Delivered regular reports, threat analysis, and security posture reviews to ITCS and client banks.
01
Background
A UK-based privacy software company wanted to leverage the breadth of AWS services to build their B2B and B2C applications. The customer required a secure, scalable, and compliant cloud foundation, with optimized workloads across testing, staging, and pre-production environments.
They also aimed to provide best-in-class security controls while meeting regulatory standards like GDPR.
02
Challenges
- Need to automatically drop non-production workloads using tools to control costs.
- Requirement to use GitHub for infrastructure build code.
- Compliance with GDPR regulations for data protection.
- Managing access for outsourced development teams across different environments.
03
Our Approach
Cherrylabs designed and implemented a Terraform-based provisioning framework for AWS services, enabling consistent, automated deployments.
- Built an AWS Landing Zone to provide secure and structured access for all environments.
- Configured all services using private endpoints to enhance security.
- Created an API Gateway to securely expose the application to external users.
The Results
Stronger Security for 100+ Financial Institutions
Proactive Threat Detection
Reduced detection and response times for incidents.
Always-On Monitoring
Continuous monitoring ensured real-time protection.
Cost-Effective Security
Leveraged cloud-native SOC tools to enhance protection without heavy investment.
Scalable Security Posture
Provided ITCS with the ability to secure 100+ institutions through a centralized SOC model.
More Customer Stories
