Cybersecurity Operations Centre (SOC) for a Metropolitan Municipality

The metropolitan municipality had no central security monitoring for its critical systems such as e-municipality services and water and transport. Security incidents were noticed days later in scattered tools.

Solution

Omurga deployed the SIEM platform, started log collection from 14,000 users and 900 servers, wrote 120 use cases and set up a 24/7 SOC working jointly with municipal staff. Incident response procedures and drills were carried out.

Results

• Mean time to detect an incident: from days to 6 minutes
• Containment time in a ransomware drill: 22 minutes
• Evidence generation for KVKK and public-sector information security guidance requirements

Annual security awareness training and phishing simulation for municipal staff were also added to the contract.