CPFL implements robust Microsoft security solution and gains visibility and intelligence

Getting to know Microsoft security tools

Approximately two years ago, going through a time of expansion and increasingly using the Microsoft Cloud, the company set up an Information Security area and one of its first missions was the review of their Security Information and Event Management (SIEM) tool, seeking greater visibility and insertion of intelligence into this environment.

"We are Microsoft desktop, server and cloud customers, so we have learned about the security modules, their differentials, the features and integrations with the entire suite in our environment," says Renato Amabile da Costa, Information Security coordinator of the CPFL Group. 

After conducting a proof-of-concept, the company implemented Microsoft Sentinel in its environment, a solution that includes: threat intelligence, attack detection, threat visibility, proactive search and threat response, with Azure Monitor Logs, which collects and organizes log data.

"Instead of having dozens of different dashboards and consoles in my Security Operations Center (SOC), the solution manages dozens of tools. It's the flagship of our SOC, which gives visibility to the environment and is very strategic for us," says Renato.

Visibility and intelligence in the CPFL environment

"With the home office we have lost the physical barriers of IT, and our employees' homes, through remote access, have become part of the company. The tool has enabled us to achieve this kind of visibility," celebrates Renato.

The solution promoted comprehensive, easy-to-operate monitoring, threat detection, and automation of its security environment.

"What helped us most was having visibility of our network and equipment, with smarter tools to identify attacks from the beginning, mitigating, and even preventing the attack," explains Renato.

Since implementation, the CPFL team has continued to seek improvements to make the most of the tool and keep up with the news, always seeking to increase the scope of the solution to achieve an increasing level of monitoring.