Jun 04, 2024
No image
IBM Security QRadar SIEM and 9 Custom Security Tools for 70+ US State Agencies
Completed

IBM Security QRadar SIEM and 9 Custom Security Tools for 70+ US State Agencies

$100,000+
7-12 months
United States
6-9
view project
Service categories
Service Lines
IT Services
Domain focus
Government
Programming language
Python
SQL
Subcategories
IT Services
Cybersecurity

Challenge

The end customer was looking to create a centralized SIEM solution that would replace scattered security systems operating at the state agencies and connect them to the unified security operation center (SOC) in order to provide all the agencies with the needed level of security monitoring stipulated by the state administration. Since 5 agencies had already been using IBM Security QRadar SIEM, the Customer decided to develop the future solution using the same platform. Taking into consideration the scope of the project, the Customer was looking for a highly professional SIEM team that could implement the system according to the provided requirements.

Solution

ScienceSoft was selected to participate in the project as one of IBM Advanced Partners with more than 13 years of expertise in SIEM solutions development and customization for companies in Banking and Finance, Telecommunication, Healthcare and Public Sector. The 6-month project was completed fully on the Customer’s site. The project started with the deployment of IBM QRadar SIEM according to the architecture provided by the Customer. The deployment included configuration of the existing and newly acquired appliances, software upgrading and patching in order to ensure the stable functioning of the platform.

Results

ScienceSoft’s SIEM team successfully completed IBM Security QRadar SIEM deployment and configuration in accordance with the Customer’s architecture. More than 70 state agencies were connected to the unified security operation center that gathers and analyzes events from thousands of supported log sources and tens of unsupported ones due to log extensions. The provided solution now allows the Customer to process about 10,000 events per second and more than 300,000 flows per minute.