TÜV SÜD anticipates the future confidently with Microsoft Defender, Security Copilot

TÜV SÜD is a trusted partner in testing, certification, auditing, and advisory services—a data-intensive business. In a world of rapidly evolving threats, it wanted to supercharge its trusted Microsoft Defender solutions to speed remediation.

The company turned to Microsoft Security Copilot to protect its vast and invaluable data, using the power, speed, and scalability of generative AI with its Microsoft Sentinel and Defender solutions.

TÜV SÜD handles threats faster and more accurately than ever before because it achieves a holistic overview of its threat landscape, unclouded by false positives. It’s also bringing new analysts up to speed in a complex profession in just months.

“We have a holistic view of our environment with Microsoft Security solutions. Faster intelligence from Security Copilot means I can act faster. That’s a huge advantage.”

Karsten Bode, Enterprise Security Architect, TÜV SÜD

Safeguarding the products we trust

Groundbreaking inventions may keep the world turning, but safety is nonnegotiable. Innovators have turned to TÜV SÜD since 1866 to navigate the complex quality and regulatory landscape that protects consumers. As a trusted partner to businesses the world over, TÜV SÜD ensures that everything from children’s toys to infrastructure and digital products are designed to be safe, sustainable, and of the highest quality. TÜV SÜD issues certificates to ensure product quality, creating a safer, more sustainable tomorrow from more than 1,000 locations around the globe.

Unifying security for simplicity and safety

TÜV SÜD’s safety commitment has been a cornerstone of its existence from day one. That assurance extends to its digital environment. “We approach information security holistically: technology, processes, and people working together. And Microsoft is one of our strategic cybersecurity vendors,” says Norbert Vetter, CISO at TÜV SÜD. The company’s confidence in Microsoft Security solutions began with the Microsoft Defender suite. “We protect the identities, data, and devices of about 28,000 employees with Microsoft Defender solutions,” says Karsten Bode, Enterprise Security Architect at TÜV SÜD. He’s referring to Microsoft Defender for Identity, Defender XDR, and Defender for Endpoint, respectively. TÜV SÜD deployed Microsoft Sentinel as its security information and event management (SIEM) system. Bode explains, “Microsoft Sentinel fulfills strict regulatory requirements in all our datacenters. It’s a dynamic SIEM that delivers visibility across our global locations. The potential to automate security tasks with playbooks is a big step forward.”

“We analyze results about 60% to 70% faster with Security Copilot. It plays a central role in our ability to speed up threat analyses and activities, fundamentally reducing the risks for our IT landscape worldwide.”

Norbert Vetter, CISO, TÜV SÜD

Amping up team effectiveness with Security Copilot

Bode was immediately intrigued with Microsoft Security Copilot. “We joined the early adopter program for Security Copilot,” he explains. “The product evolution was amazing.” Productivity immediately surged by 60% to 70%. Bode continues, “The embedded Security Copilot makes life easier for me. Its convenient interface makes it easy to go deeper into the situation or choose to start a remediation action directly from the sidebar. That’s what I appreciate about this solution.”

Both experienced and new security analysts jump-start their productivity with automation. “No two people document their investigations in the same way. But with Security Copilot, we have consistent reporting that everyone can easily understand,” Bode points out. “And it’s also easier to get enriched data, like additional information about the IP address from which a threat originates. We can view the information graphically, in a table, or in the way that makes the most sense for that situation.”

New analysts gain skills more quickly, thanks to the Copilot automation that uses their prompts to create detailed queries. “After using Security Copilot for three months, a new analyst who began without any security skills has a very solid knowledge base and is an effective team member,” affirms Bode.

“Microsoft Sentinel fulfills strict regulatory requirements in all our datacenters. It’s a dynamic SIEM that delivers visibility across our global locations.”

Karsten Bode, Enterprise Security Architect, TÜV SÜD

Forging ahead with automation

In an era of increasingly dynamic threats and a scarcity of skilled security professionals, TÜV SÜD isn’t just keeping up—it’s making gains on overall security, and on analyst productivity and effectiveness. “We have a holistic view of our environment with Microsoft Security solutions. Faster intelligence from Security Copilot means I can act faster. That’s a huge advantage,” says Bode. He looks forward to further Copilot automation. “My advice is to go ahead with this wonderful solution,” he continues. “Bring security to the next level with AI integration. We’re beginning to deploy other Copilot solutions, and I’m looking forward to a more secure future.”

Vetter agrees and concludes, “We analyze results about 60% to 70% faster with Security Copilot. It plays a central role in our ability to speed up threat analyses and activities, fundamentally reducing the risks for our IT landscape worldwide.”

Discover more about TÜV SÜD on Instagram, LinkedIn, and YouTube.