Splunk Enterprise Security for South African Crude Oil Refinery.

A large crude oil refinery in South Africa which accounts for over 35% of South Africa’s refining capacity (24,000 tons) per day. The refinery is a joint venture between two multinational oil giants and imports crude oil from Middle east, Europe an Africa. The refinery produces over 45 products including petrol, diesel, jet fuel, paraffin, marine fuel oil and chemical feed stocks.

Citrus Consulting Services Enables Splunk Enterprise Security for Effective Monitoring and Securing Sensitive IT resources in a South Africa Crude Oil Refinery.

• Lacked SIEM for alerting, searching, reporting and visualizations.
• Inefficient alert monitoring system was slow and left company vulnerable to data breaches.
• Unable to dedicate necessary time to preventative security measures.
• System in place could not provide visibility into the company’s many global locations.
• Lost revenue as a result of avoidable downtime.

• Evaluated the technical and management readiness of each application for onboarding into the SIEM application monitoring program
• Evaluated the portfolio of applications for dependencies and interdependencies
• Evaluated the maturity of SIEM program and dependencies required for application onboarding
• Transitioned portfolio of applications to Citrus MSS services for analysis and design, implementation, testing, and deployment.
• Through a mix of onsite and remote access to the client’s SIEM System, Citrus MSS team configured, tested, and assisted in the deployment of the application monitoring use cases defined in requirements documentation.
• The Citrus MSS team made ongoing adjustments to the client’s SIEM system to refine and improve its ability to produce effective alerts and actionable information

• Achieved end-to-end visibility for quick intervention
• Drastically reduced security incident investigation time
• Prevented ransomware attacks by identifying threats quickly
• Freed up analysts’ time to proactively prevent issues before they arise
• Gained ability to prevent lost revenue from unnecessary e-commerce and point-of-sale downtime