Aditro

Centralized log data management provides a rapid tool for tracing who has accessed data systems. Users who have not been granted access rights will not be able to access our customers’ information systems. Sentinel has been reliable and effective.

Solution

Aditro’s information management department examined several alternatives for implementing the centralized log data management solution.

“We spotted the Sentinel solution in Gartner’s reports, and the Proof of Concept we implemented using the Sentinel solution was found successful and reliable. Our choice was also influenced by the positive experiences our data security expert had with company and the versatile functionality Sentinel had to offer. The licensing system is clear, and we pay for licenses based on an estimated usage need. In addition to covering centralized log data management, the solution can be expanded to include identity management and control of information security as a whole,” Korhonen says

Sentinel Enterprise was integrated into the duplicated production platform used for providing Aditro applications. Aditro purchases its data center services from Elisa Appelsiini, a company with high availability data centers located in the Helsinki Metropolitan Area.

The co-operation between Aditro and Spellpoint, an IT services company specializing in Identity and Access Management (IAM), began in fall 2014. “The experts at Spellpoint have technical expertise and a good understanding of business functions. They are flexible and can rapidly find a solution to any challenges that may surface. They also provide us with extensive documentation,” Korhonen explains.

“Today’s customers and end users are increasingly demanding when it comes to information security. Regulations are also tightening, and a Finnish act that came into force in 2015 requires companies to report security breaches. Aditro has understood the situation, and we have developed the environment to meet their requirements one part at a time. Spellpoint provides Aditro with expertise and consultant-level support and maintenance services. Sentinel makes it easy to link events to users, and integrating the product into various systems is simple. Any anomalies can be examined in one view, which facilitates the detection of securityrelated issues,” says business manager Mika Käck from Spellpoint.

Results

Aditro is now able to provide its customers with more comprehensive services than before. “Our customer’s data security policies require effective management and storage of log data, and we can now provide our customers with a more extensive range of services. Organizations must be able to trace who has used specific data systems at a specific point in time and what has been done and how. Without centralized log management, collecting the data we need would mean wading through a jungle of logs,” Korhonen says.

Aditro monitors the usability of the applications its customers utilize and takes action if anything out of the ordinary takes place in the customer’s environment. “Centralized log data management provides a rapid tool for tracing who has accessed data systems. Users who have not been granted access rights will not be able to access our customers’ information systems,” Korhonen says. “Sentinel has been reliable and effective.”

“We provide log data management as a service to a couple of significant customers. The number of these customers will definitely grow in the future. The SaaS platform is also used to produce firewall, load balancing and Active Directory log data. We are able to provide our customers with reports and visibility from server device level to application user level. Our own staff is on call 24/7, and Elisa Appel ­ siini provides us with a 24/7 service level,” Korhonen emphasizes.

According to Korhonen, Aditro has a determined approach to investing in the usability and security of applications produced for customers. “The majority of our customers log into our SaaS applications over a public network. We are also increasingly interested in identity management and providing a clear picture of the overall situation. We are currently taking steps towards security event management and making use of Spellpoint’s expertise to develop our environment.”