How Logpoint helped Matmut improve event
visibility across the entire IT architecture
and reduce incident response time
Initially scoped as a cost-effective and easy to use log management tool, French insurance company Matmut expanded the use of the Logpoint solution across the IT security infrastructure. Benefits include 80-90% time savings in incident diagnostics, faster problem resolution and major improvements in the service quality for end-users.
Background
French insurance company Groupe Matmut, originally established in Rouen in 1961 as Mutuelle des Travailleurs Mutualistes, is major player in the French insurance market.
Initially focused on automotive insurance, the group today offers a broad range of products, including automobiles, motorcycles, boats, homes, third-party liability, family protection, health, legal protection and assistance. In addition, Matmut offers financial services and savings.
Still headquartered in Rouen today, Matmut currently insures over 3.8 million policyholders and manages nearly 7.2 million contracts. The company employs 6.200 people and generated a turnover of 2.1 billion Euro in 2017.
A Highly responsive support in deploying the solution plus total control over costs were decisive criteria in validating the Logpoint solution. The savings generated by the Logpoint solution allowed us to upgrade the quality of service offered to our organization, which is an unexpected but much-welcomed benefit.
Cédric Chevrel, CISO,
Matmut
The challenge
In 2017, the Matmut group wanted to acquire a log management solution that would deliver correlated views, facilitate incident searches, improve prevention and trigger threshold notifications. The scope was to improve event visibility across the entire IT architecture and reduce incident response time. The project was strategic for Matmut’s IT division and prioritized in the company IT master plan.
“I wanted a flexible, fast-response and easy-to-use solution for all the teams, in particular, one that could easily be used to create dashboards and make data and subsets of data available on a selective basis. Cost-efficiency was also a prerequisite in the scoping of a solution”, says Cédric Chevrel, CISO at Matmut.
A SIEM solution would empower Matmut to reduce security risks, notably by achieving visibility of data and events such as suspicious extraction of data, statistics on use of Active Directory accounts (attempts, successes, failures, etc.) and the correlation of minor security events, that individually may pass unnoticed, but in combination triggers an alert.
The aim was also to facilitate the correlation of events when handling load-balancing and inter-architecture communications across platforms.
The solution
Download the full case to learn how How Logpoint helped Matmut improve event visibility across the entire IT architecture and reduce incident response time: