Basefarm security operations center

Is your organization prepared for cyber-attacks?

Do you keep an eye out for all possible threats? And what abilities do you have to detect and react in a structured way if a security event occurs?

It can be both expensive and time consuming for a business to keep up with technological developments and to comply with new laws and regulations to meet today’s and tomorrow’s threats. Therefore, Basefarm offers Security Operations Center (SOC *) as a service, where our Security and Monitoring Center takes a holistic approach to IT and information security.

1. Specialists

Basefarm SOC continuously monitors our customers’ security 24/7/365. It is staffed with certified security analysts who review and act on security incidents in your environment. SOC is a service that gives you the opportunity to quickly and efficiently analyze anomalies and thus create the conditions for taking appropriate action. This will also result in lower costs for your security events.

2. Events

Our Security Incident Response Team (BF-SIRT) is available 24 hours a day to handle IT security events and to monitor vulnerabilities for prevention. BF-SIRT has established a collaboration with the Swedish and Norwegian
data-based organizations CERT-SE and NorCERT, where knowledge and experience is shared, and security issues discussed.

3. Proactive security

SOC security analysts monitor and analyze IT-related threats and risks that may affect your infrastructure. They provide suggestions for improvements and help strengthen your IT environment. This is a proactive activity that will raise the security- and awareness level of threats to your company.

4. Manage incidents

SOC Security Analysts follow a process-based incident management procedure to detect, analyze and report security events and alarms. You as a customer can choose to set specific requirements for actions and alarms.
Basefarm SOC uses data from intrusion monitoring, vulnerability analyzes, network traffic monitoring, world surveillance, and more. This data is analyzed using leading software and incident management tools that are orchestrated with dedicated security capabilities.
The service includes automated analyzes that are combined with in-depth manual technical analysis in the incident management tools and the Threat Intelligence reports. This provides the necessary support to quickly detect deviations and act, as well as address security incidents in your IT environment. In short, this provides a service that quickly identifies threats and manages risks,.

5. SOC platform

The service provides access to SecOps and SIRT resources 24/7/365, but is also often complemented by the following Basefarm service components: Intrusion Detection System (IDS), Web Application Firewall (WAF), and Log Management as Security Information and Event Management (SIEM).

These components are then dimensioned as required. Logging is usually done by logging sources in the firewall, load balancer, Intrusion Detection System (IDS), proxy server, AD, applications and Anti-DDoS system.
The logs are protected from manipulation and saved according to the agreed time.

6. Other Services

Basefarm offers additional services such as Penetration Testing, IT Forensic, Vulnerability Testing and Security Consulting.

* SOC is an evaluation station where everything happening in IT systems and IT infrastructure is analyzed from a security perspective.

PayEx needed to design, build and run their state of the art Nordic payment solution catering robustness, flexibility and cost efficiency. The platform needed to be PCI DSS compliant as it exchanges, processes and stores huge amounts of card data and financial information. The solution is mission critical and margins and reputation are built over time, by delivering payment services with high quality, competence and value. They needed a secure and stable environment and a partner with solid systems for operations and interaction, as well as an “advisor” regarding technology.

Basefarm designed the platform in close collaboration with PayEx. Since the PCI solution went live in the summer of 2011, it has now passed 300 million transactions with excellent performance, peaking at around 1.3 million transactions per day. PayEx use Basefarm actively and proactively in decision-making regarding the environment and other challenges related to technology.