ALTO and Quantum Security secure millions of financial transactions using Microsoft Sentinel

PT. ALTO Network is a financial services technology company that provides banking and payment solutions for all the major banks in Indonesia. The company’s goal is to provide seamless transactions through highly secure and innovative payment platforms. “We want to deliver 100 percent of our services without any security incidents or interruptions, and we want to protect our data,” says Alvin Christian, Information Security Engineer at PT. ALTO Network.

The company is a key provider of end-to-end bank switching and digital payments, handling millions of transactions per month in the critical and quickly evolving infrastructure of Indonesia’s financial services environment. As such, ALTO must stay nimble and drive innovation to stay in front of changes in the industry.

When the company decided to build a security operations center (SOC) to enable growth and evolution of its capabilities, it turned to its partner, Quantum Security, managed detection and response service provider. Quantum built a central security dashboard using its managed detection and response services together with Microsoft Sentinel. Quantum’s deep existing partnership with Microsoft made the transition simple.

Download video transcript

ALTO wanted not only to increase its overall security posture, but also to achieve a vital certification, the Payment Card Industry Data Security Standards (PCI DSS), a key requirement for regulatory compliance in enabling a SOC. “PCI DSS is a certification that ensures card data security,” explains Christian. “It’s important for PT. ALTO since it’s a high-level certification which not many companies can achieve. Quantum helped us utilize Microsoft Sentinel to meet the requirements for PCI DSS.”

Noting the relatively quick success of the project, Steve Ng, Head of Strategic Alliances at Quantum Security says, “Quantum recommended a cloud-native managed detection and response solution together with our Microsoft Sentinel platform. We helped PT. ALTO ingest their logs into Azure Log Analytics together with Microsoft Sentinel. Within six months of deployment, PT. ALTO achieved their PCI DSS certification.”

As a supplement to the certification, control over data and the accompanying analysis capabilities were essential for ALTO, so it used out-of-the-box Microsoft Sentinel connectors along with Quantum’s data ingestion pipeline. “With Microsoft Sentinel and the engineering effort from Quantum’s team, we’ve helped mold the entire threat detection landscape,” says Ng, noting that the ongoing collaboration has been transformative. “Together with PT. ALTO, we can do concurrent investigations with both teams to ensure we’re fully aware of everything going on in the environment.”

“We knew that whatever security solution we put into place, it had to be simple,” adds Christian. “We need to ensure we have the best level of protection available, so we turned to Quantum Security and Microsoft Sentinel.”

Amidst rapidly changing digital finance ecosystems and high consumer expectations for reliability and speed, stability and security are paramount. Concludes Christian, “For the banks and financial institutions that are our customers, trust is everything.”

Find out more about PT. ALTO Network on Facebook and LinkedIn.

“The idea of a cloud-native SIEM like Microsoft Sentinel was attractive because it aligns with how we think about the evolution of technology for financial companies. It offers us flexibility and the cost-effective product we need for our solution portfolio.”

Alvin Christian, Information Security Engineer, PT. ALTO Network